PT-2026-81731

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in DevTools allows a remote attacker to obtain sensitive information through UI Interaction by leveraging social engineering. Recommendations Update Google Chrome ...

PT-2026-81748

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An out-of-bounds write in ANGLE allows a remote attacker to potentially execute arbitrary code outside the sandbox when a user opens a crafted HTML page. ANGLE Almost Native Graphics...

PT-2026-81793

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description UI misrepresentation in CustomTabs allows a remote attacker to spoof the address bar by using a crafted HTML page. Recommendations Update Google Chrome on Android to version...

PT-2026-81811

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Network component allows a remote attacker to potentially bypass the web origin policy, which is a security mechanism that restricts how a document or...

PT-2026-81803

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the ReadingList component allows a remote attacker who has already compromised the renderer process to bypass the web origin policy. This is achieved by usi...

PT-2026-81813

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Network component allows a remote attacker to leak sensitive information. This is achieved by leveraging social engineering to entice a user to visit a...

PT-2026-81591

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An incorrect reference resolution in the FileSystem component allows a remote attacker to potentially execute arbitrary code outside the sandbox. This is achieved by leveraging social...

PT-2026-81586

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A race condition in the Core component on Windows allows a remote attacker to bypass the web origin policy. This is achieved by leveraging social engineering to entice a user to visit a...

PT-2026-81542

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description UI misrepresentation in the browser allows a remote attacker to spoof UI elements by using a crafted HTML page. Recommendations Update Google Chrome to version 152.0.7977.65 or later...

PT-2026-81627

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An observable discrepancy in the Autofill feature allows a remote attacker to obtain sensitive information through the use of a crafted HTML page. Recommendations Update Google Chrome t...

PT-2026-81577

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An externally controlled reference in the QUIC protocol allows a remote attacker to bypass the web origin policy through the use of a crafted HTML page. QUIC is a transport layer networ...

PT-2026-81597

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper privilege management in the Navigation component allows a remote attacker to potentially execute arbitrary code outside the sandbox. This occurs if the attacker has already...

PT-2026-81575

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 152.0.7977.65 Description A use after free issue exists in the Sync component. This occurs when a remote attacker lures a user to a crafted HTML page, potentially allowing the execution of arbitrary code...

PT-2026-81578

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in the BFCache Back-Forward Cache, a browser feature that stores a complete page in memory to allow instant loading when navigating back or forward allows a remote...

PT-2026-81618

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An out-of-bounds read exists in Skia, a graphics library, which allows a remote attacker to potentially read memory inside the sandbox by using a crafted media file. Recommendations...

PT-2026-81564

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in SiteIsolation allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted PDF file. Site isolation is a securi...

PT-2026-81799

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An out of bounds read exists in Tint, which allows a remote attacker to potentially read memory inside the sandbox by using a crafted HTML page. An out of bounds read occurs...

PT-2026-81715

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the ServiceWorker allows a remote attacker to bypass the web origin policy through the use of a crafted HTML page. The web origin policy is a security mechani...

PT-2026-81525

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A race condition in the Payments component allows a remote attacker who has compromised the renderer process to leak cross-origin data through a crafted HTML page. A race condition occu...

KLA91235 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution...