KLA91261 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution...

PT-2026-88548

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in DevTools allows a remote attacker to execute arbitrary code outside the sandbox by using a crafted HTML page. Use after free is a memory corruption flaw that...

PT-2026-88557

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A race condition in the Updater component on Windows allows a local attacker to execute arbitrary code outside the sandbox through a local program. A race condition occurs when the...

PT-2026-88567

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A race condition in the Updater component on Windows allows a local attacker to potentially execute arbitrary code outside the sandbox via a local program. A race condition occurs when...

PT-2026-88571

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the ServiceWorker allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted HTML page. Site isolation is a...

PT-2026-88573

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the FileHandling component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a user t...

PT-2026-88575

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Missing authorization in the Omnibox allows a remote attacker to bypass system access restrictions and access a privileged page. This is achieved by leveraging social engineering and a...

PT-2026-88590

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An information leak exists within the Transactions Platform. A remote attacker can obtain sensitive information by inducing a user to visit a crafted HTML page. Recommendations Update...

PT-2026-88626

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue exists in the Passwords component. This allows a remote attacker to potentially execute arbitrary code outside the sandbox through UI interaction, provided they c...

PT-2026-88630

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An uncontrolled search path element in the CredentialProvider allows a local attacker to execute arbitrary code outside the sandbox via a local program on Windows systems. Recommendatio...

PT-2026-88638

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A clickjacking issue in the Input component allows a remote attacker to spoof UI elements using a crafted HTML page. This exploitation requires the attacker to have already compromised...

PT-2026-88654

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A race condition in Chromoting on Windows allows a local attacker to execute arbitrary code outside the sandbox using a local program. A race condition occurs when the timing or sequenc...

PT-2026-88549

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A cross-site request forgery issue exists in DeviceBoundSessionCredentials. This allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts h...

PT-2026-88554

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An information leak in the Enterprise component on Windows allows a remote attacker to obtain sensitive information by inducing a user to visit a crafted HTML page. Recommendations Upda...

PT-2026-88569

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper input validation in Extensions allows a remote attacker to bypass the web origin policy—a security mechanism that restricts how a document or script loaded from one origin can...

PT-2026-88593

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Missing authorization in the FileSystem component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a user to...

PT-2026-88599

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the Network component allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted HTML page. Site isolation ...

PT-2026-88604

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in Core allows a remote attacker to execute arbitrary code outside the sandbox. This is achieved by leveraging social engineering and a crafted Chrome extension...

PT-2026-88605

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the FileSystem component allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted PDF file. Site isolatio...

PT-2026-88612

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue exists in ANGLE on Windows. This occurs when a remote attacker induces the system to access memory after it has been freed, which can be triggered via a crafted...