PT-2026-88667

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description UI misrepresentation in the UrlFormatting component allows a remote attacker to spoof the address bar using a crafted domain name through social engineering. Recommendations Update Goog...

PT-2026-88673

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper input validation in the Network component allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded...

PT-2026-88686

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An out of bounds read exists in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on various graphics platforms. This issue allows a remote attacker to read memory outside...

PT-2026-88688

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in Chromecast allows a remote attacker to execute arbitrary code inside the sandbox by inducing the user to visit a crafted HTML page. Use after free is a memory...

PT-2026-88690

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper input validation in the Passwords component allows a remote attacker to potentially leak sensitive information through the use of crafted network traffic. Recommendations Updat...

PT-2026-88692

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An out of bounds read exists in Tint, which could allow a remote attacker to potentially read memory inside the sandbox by using a crafted HTML page. An out of bounds read occurs when t...

PT-2026-88693

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An information leak exists in the Editing component that allows a remote attacker to obtain sensitive information by inducing a user to visit a crafted HTML page. Recommendations Update...

PT-2026-88701

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A race condition in V8, the open-source JavaScript and WebAssembly engine, allows a remote attacker to execute arbitrary code within the sandbox by inducing the victim to open a special...

PT-2026-88704

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An out of bounds read occurs in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on various graphics platforms. This issue allows a remote attacker who has already...

PT-2026-88710

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the Omnibox allows a remote attacker to bypass system access restrictions to reach a privileged page by using a crafted HTML page. Recommendations Update Goog...

PT-2026-88716

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper initialization in Views on Windows allows a remote attacker to potentially execute arbitrary code outside the sandbox. This requires the attacker to have already compromised th...

PT-2026-88721

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An out-of-bounds write occurs in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on top of other graphics APIs. This issue allows a remote attacker to potentially execute...

PT-2026-88725

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in V8 allows a remote attacker to execute arbitrary code inside the sandbox. This is achieved by leveraging social engineering and a crafted Chrome extension. Use...

PT-2026-88730

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An integer overflow in WebRTC allows a remote attacker to read memory inside the sandbox by using a crafted HTML page. An integer overflow occurs when an arithmetic operation attempts t...

PT-2026-88731

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Missing authorization in the Document Object Model DOM, which is the programming interface for HTML and XML documents, allows a remote attacker to potentially leak sensitive information...

PT-2026-88741

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A race condition in the Browser component allows a remote attacker to bypass system access restrictions by using a crafted HTML page. A race condition occurs when the timing or sequence...

PT-2026-88746

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue exists in the Web Authentication component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A...

PT-2026-88750

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An out of bounds read occurs in WebGL, which may allow a remote attacker to execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page. An out of bound...

PT-2026-88755

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Clickjacking in the Downloads component allows a remote attacker to spoof UI elements using a crafted HTML page through social engineering. Clickjacking is a technique where an attacker...

PT-2026-88757

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in V8 allows a remote attacker who has compromised the renderer process to read memory inside the sandbox by using a crafted HTML page. Use after free is a memory...