PT-2026-88623

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A race condition exists in the DataTransfer component. A remote attacker can use social engineering to lure a user to a crafted HTML page, which may allow the attacker to obtain sensiti...

PT-2026-88633

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in DevTools allows a local attacker to execute arbitrary code outside the sandbox via a local program. Use after free is a memory corruption flaw that occurs when...

PT-2026-88637

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Missing authorization in Extensions allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network...

PT-2026-88670

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in SiteIsolation allows a remote attacker to bypass site isolation using a crafted file. This requires the attacker to have already compromised the renderer...

PT-2026-88694

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in DataTransfer allows a remote attacker who has compromised the renderer process to obtain sensitive information through a crafted HTML page. Recommendations...

PT-2026-88738

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An out of bounds write occurs in the Media component, which could allow a remote attacker to potentially execute arbitrary code outside the sandbox by inducing the user to visit a craft...

PT-2026-88748

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue exists in ANGLE on Windows. This occurs when a remote attacker, having already compromised the renderer process, uses a specially crafted HTML page to potentially...

PT-2026-88751

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the Paint component allows a remote attacker to obtain cross-origin data by using a crafted HTML page. Cross-origin data refers to information belonging to a...

PT-2026-88553

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A confused deputy issue in BackgroundFetch allows a remote attacker who has compromised the renderer process to leak sensitive information through a crafted HTML page. A confused deputy...

PT-2026-88558

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description UI misrepresentation in Geometry allows a remote attacker to spoof UI elements through a crafted HTML page by leveraging social engineering. Recommendations Update Google Chrome to...

PT-2026-88587

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Missing authorization in the FileSystem component allows a remote attacker to potentially execute arbitrary code outside the sandbox. This requires the attacker to have already...

PT-2026-88607

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description UI misrepresentation in the Downloads component allows a remote attacker to spoof UI elements using a crafted HTML page through social engineering. Recommendations Update Google Chrome ...

PT-2026-88629

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A numeric truncation error in the Media component allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page...

PT-2026-88641

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An information leak in the Navigation component allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted HTML page. Site isolation i...

PT-2026-88642

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in Input allows a remote attacker to execute arbitrary code inside the sandbox by using a crafted HTML page. Use after free is a memory corruption flaw that occur...

PT-2026-88647

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect reference resolution in the FileSystem component allows a remote attacker to potentially execute arbitrary code outside the sandbox. This is achieved by leveraging social...

PT-2026-88659

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description UI misrepresentation in the user interface allows a remote attacker to spoof UI elements via a crafted HTML page by leveraging social engineering. Recommendations Update Google Chrome t...

PT-2026-88664

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A type confusion issue exists in V8, the open-source JavaScript and WebAssembly engine. This allows a remote attacker to read memory inside the sandbox by inducing the browser to proces...

PT-2026-88669

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Missing authorization in Views allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a user to visit a crafted HTML...

PT-2026-88696

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An out of bounds read exists in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on various graphics platforms. This issue allows a remote attacker to read memory outside...