PT-2026-81772

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in the Passwords component allows a remote attacker to bypass the web origin policy. This occurs when an attacker has compromised the renderer process and uses...

CVE-2026-78958: Use of Uninitialized Resource

Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79120: Use of Uninitialized Resource

Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

PT-2026-81614

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An observable discrepancy in the Scalable Vector Graphics SVG implementation allows a remote attacker to obtain cross-origin data by using a crafted HTML page. Recommendations Update...

PT-2026-81631

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak exists in the Cross-Origin Resource Sharing CORS implementation. A remote attacker who has already compromised the renderer process can leak cross-origin data by usi...

PT-2026-81635

Name of the Vulnerable Software and Affected Versions Google Chrome on Mac versions prior to 152.0.7977.65 Description Missing authorization allows a remote attacker to bypass the web origin policy—a security mechanism that restricts how a document or script loaded from one origin can interact wi...

PT-2026-81653

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak exists in the BFCache Back-Forward Cache, a browser feature that stores a complete page in memory to allow instant loading when navigating back or forward. This issu...

PT-2026-81654

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the StorageAccessAPI allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The web...

PT-2026-81656

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Network component allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The web...

PT-2026-81670

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the Transactions Platform allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The w...

PT-2026-81680

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in Paint allows a remote attacker to potentially bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded from...

PT-2026-81682

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak in the Payments component allows a remote attacker to obtain cross-origin data by using a crafted HTML page. Cross-origin data refers to information belonging to a...

PT-2026-81693

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in the Preload feature allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded from...

PT-2026-81720

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the browser allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded from one...

PT-2026-81724

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An information leak exists in CustomTabs, which allows a local attacker to obtain cross-origin data through a co-installed application. Cross-origin data refers to informatio...

PT-2026-81738

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in Web Authentication Passkeys & Security Keys allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a...

PT-2026-81750

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in Extensions allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The web origin polic...

PT-2026-81753

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak exists in the Canvas component that allows a remote attacker to leak cross-origin data by using a crafted HTML page. Cross-origin data leakage occurs when a website...

PT-2026-81774

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Preload component allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The web...

PT-2026-81525

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A race condition in the Payments component allows a remote attacker who has compromised the renderer process to leak cross-origin data through a crafted HTML page. A race condition occu...