PT-2026-81774

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Preload component allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The web...

PT-2026-81525

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A race condition in the Payments component allows a remote attacker who has compromised the renderer process to leak cross-origin data through a crafted HTML page. A race condition occu...

PT-2026-81538

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak in Canvas allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded from one origin can...

PT-2026-81552

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper initialization in the Network component allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded...

PT-2026-81554

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An incorrect reference resolution in the Loader allows a remote attacker to bypass the web origin policy through crafted network traffic. The web origin policy is a security mechanism...

PT-2026-81555

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the editing component allows a remote attacker to bypass the web origin policy. This occurs when an attacker compromises the renderer process and uses socia...

PT-2026-81559

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incomplete cleanup in Chromium allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded from one origin can...

PT-2026-81561

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An observable discrepancy in CustomTabs allows a local attacker to obtain cross-origin data through a co-installed application. Cross-origin data refers to information...

PT-2026-81566

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An observable discrepancy in PerformanceAPIs allows a remote attacker to potentially obtain cross-origin data through the use of a crafted HTML page. Cross-origin data refers to...

PT-2026-81571

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak exists in the Extensions component. A remote attacker can use social engineering to obtain cross-origin data by utilizing a crafted Chrome extension. Cross-origin da...

PT-2026-81572

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the Core component allows a remote attacker to bypass the web origin policy. This occurs when an attacker has already compromised the renderer process and use...

PT-2026-81573

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in WebXR allows a remote attacker to potentially leak cross-origin data through a crafted HTML page, provided the attacker can leverage social engineering to...

PT-2026-81592

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in the GPU allows a remote attacker who has compromised the renderer process to potentially obtain cross-origin data through a crafted HTML page. Recommendatio...

PT-2026-81598

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in DeviceBoundSessionCredentials allows a remote attacker to bypass the web origin policy through crafted network traffic, typically leveraging social...

PT-2026-81603

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the StorageAccessAPI allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The web...

PT-2026-81640

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description A race condition in the permissions system allows a remote attacker to bypass the web origin policy. This is achieved by leveraging social engineering and directing the user ...

PT-2026-81645

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the Loader component allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded fr...

PT-2026-81659

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper resource exposure in the StreamsAPI allows a remote attacker to potentially bypass the web origin policy—a security mechanism that restricts how a document or script loaded fro...

PT-2026-81661

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An incorrect reference resolution in the Cache allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded fro...

PT-2026-81672

Name of the Vulnerable Software and Affected Versions Google Chrome on Windows versions prior to 152.0.7977.65 Description Inadequate encryption strength in Notifications allows a remote attacker to bypass the web origin policy through the use of a crafted HTML page, typically leveraging social...