PT-2026-81715

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the ServiceWorker allows a remote attacker to bypass the web origin policy through the use of a crafted HTML page. The web origin policy is a security mechani...

PT-2026-81748

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An out-of-bounds write in ANGLE allows a remote attacker to potentially execute arbitrary code outside the sandbox when a user opens a crafted HTML page. ANGLE Almost Native Graphics...

PT-2026-81534

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A type confusion issue exists in ANGLE, a compatibility layer that translates OpenGL calls to other graphics APIs. This flaw allows a remote attacker to potentially execute arbitrary co...

PT-2026-81535

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A type confusion issue exists in ANGLE, a compatibility layer that translates OpenGL calls to other graphics APIs. This flaw allows a remote attacker to potentially execute arbitrary co...

PT-2026-81536

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A race condition in ANGLE allows a remote attacker to potentially execute arbitrary code outside the sandbox by using a crafted HTML page. A race condition occurs when the timing or ord...

PT-2026-81538

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak in Canvas allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded from one origin can...

PT-2026-81539

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue in Views allows a remote attacker to execute arbitrary code outside the sandbox. This is achieved by leveraging social engineering to entice a user to visit a...

PT-2026-81543

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue in Chromoting allows a remote attacker to potentially execute arbitrary code outside the sandbox by sending crafted network traffic. Use after free is a memory...

PT-2026-81601

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the Device component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a user to visi...

PT-2026-81605

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in the GPU allows a remote attacker who has compromised the renderer process to potentially read memory outside the sandbox by using a crafted HTML page...

PT-2026-81610

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use-after-free issue exists in the Safebrowsing component of Google Chrome on Mac. A remote attacker can leverage social engineering to execute arbitrary code outside the sandbox by...

PT-2026-81613

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the ServiceWorker allows a remote attacker to bypass system access restrictions by using a crafted HTML page. A ServiceWorker is a script that the browser...

PT-2026-81621

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the editing process allows a remote attacker to obtain sensitive information by using a crafted HTML page. Recommendations Update Google Chrome to version...

PT-2026-81809

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Code injection in Bisection allows a remote attacker to obtain sensitive information through the use of a crafted file. Recommendations Update Google Chrome to version 152.0.7977.65 or...

PT-2026-81814

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description Incorrect reference resolution in CustomTabs allows a remote attacker to bypass system access restrictions by using a crafted HTML page. Recommendations Update Google Chrome ...

PT-2026-81818

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in WebXR allows a remote attacker to obtain cross-origin data through the use of a crafted HTML page and social engineering. WebXR is an API that enables the...

PT-2026-81825

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incomplete cleanup in the GetUserMedia function allows a remote attacker to obtain sensitive information. This requires the attacker to have already compromised the renderer process and...

PT-2026-81843

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper control of a resource through its lifetime in Workers allows a remote attacker who has compromised the renderer process to bypass site isolation using a crafted HTML page. Site...

PT-2026-81583

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the StorageAccessAPI allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The web...

PT-2026-81667

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Sync component allows a remote attacker to obtain sensitive information by sending crafted network traffic. Recommendations Update Google Chrome to...