PT-2026-81631

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak exists in the Cross-Origin Resource Sharing CORS implementation. A remote attacker who has already compromised the renderer process can leak cross-origin data by usi...

PT-2026-81834

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue in ANGLE allows a remote attacker to execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page. Use after free is a memory...

PT-2026-81845

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak exists in the CSS component that allows a remote attacker to obtain sensitive information by inducing a user to visit a crafted HTML page. Recommendations Update...

PT-2026-81841

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An observable discrepancy in Forms allows a remote attacker to obtain sensitive information through the use of a crafted HTML page. Recommendations Update Google Chrome to version...

PT-2026-81842

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description Improper input validation in the Autofill feature allows a remote attacker to obtain sensitive information by using a crafted HTML page. Recommendations Update Google Chrome ...

PT-2026-81838

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A UI misrepresentation issue in the Core component allows a remote attacker who has already compromised the renderer process to spoof UI elements. This is achieved by using a specially...

PT-2026-81777

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 152.0.7977.65 Description Incorrect authorization in the mobile version of the browser allows a remote attacker to bypass system access restrictions by using a crafted HTML page. Recommendations Update to...

PT-2026-81761

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper access control in Workers allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded from one origin...

PT-2026-81776

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A buffer overflow exists in Blink, the rendering engine used by the browser. A remote attacker who has already compromised the renderer process can execute arbitrary code within the...

PT-2026-81705

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak exists in the XR Extended Reality component, which allows a remote attacker to obtain sensitive information by inducing a user to visit a crafted HTML page...

PT-2026-81724

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An information leak exists in CustomTabs, which allows a local attacker to obtain cross-origin data through a co-installed application. Cross-origin data refers to informatio...

PT-2026-81699

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue exists in the PDF component, which allows a remote attacker to execute arbitrary code within the sandbox by using a specially crafted PDF file. Use after free is ...

PT-2026-81712

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description Improper input validation allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a crafted HTML...

PT-2026-81624

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue exists in Extensions that allows a remote attacker to potentially execute arbitrary code outside the sandbox. This is achieved by leveraging social engineering to...

PT-2026-81569

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in Skia allows a remote attacker who has compromised the renderer process to potentially obtain cross-origin data through a crafted HTML page. Skia is a 2D...

PT-2026-81604

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A protection mechanism failure in HttpsUpgrades allows a remote attacker to bypass the web origin policy through the use of crafted network traffic. The web origin policy is a security...

PT-2026-81598

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in DeviceBoundSessionCredentials allows a remote attacker to bypass the web origin policy through crafted network traffic, typically leveraging social...

PT-2026-81609

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A UI misrepresentation in the browser allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering and a crafted HTML page...

PT-2026-81581

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description UI misrepresentation in Linux Toolkit Theming allows a remote attacker using social engineering to bypass system access restrictions through a crafted HTML page. Recommendations Update...

PT-2026-81595

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use-after-free issue exists in the Compositing component. This occurs when memory is accessed after it has been freed, which can be triggered by a remote attacker using a specially...