PT-2026-107001

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in the FileSystem component allows a remote attacker to potentially execute arbitrary code outside the sandbox. This is achieved by leveraging social engineering...

PT-2026-107044

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in the user interface allows a remote attacker to potentially execute arbitrary code outside the sandbox by using a crafted HTML page. A sandbox is a security...

PT-2026-107089

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An integer overflow in the Media component allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page. An integ...

PT-2026-106861

Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...

PT-2026-106866

Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

PT-2026-106890

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-106912

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 155.0.8059.39 Description An integer overflow occurs in WebGL, which is a JavaScript API for rendering high-performance interactive 3D and 2D graphics within any compatible web browser. This issue...

PT-2026-106914

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 155.0.8059.39 Description Incorrect authorization in the Search component allows a remote attacker to potentially execute arbitrary code outside the sandbox. This is achieved by leveraging social...

PT-2026-106965

Buffer overflow in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-107030

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue in Navigation allows a remote attacker to execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page. Use after free is a memory...

PT-2026-107048

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-107091

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 155.0.8059.39 Description A Use After Free issue exists in ANGLE, which is a graphics abstraction layer. This flaw allows a remote attacker to execute arbitrary code outside the sandbox by inducing th...

PT-2026-107096

Information leak in Audio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...

PT-2026-107098

Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106426: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

SkeletonKey

CVE-2026-6765 · FormAutofill test-only handlers reachable outside automation Reporter credited by Mozilla in MFSA 2026-30 : Abdulaziz Alasaiqah. This directory holds a real reproduction harness for the vulnerability. It is meant to be run against a locally downloaded vulnerable Firefox build. It...

Linux Distros Unpatched Vulnerability : CVE-2026-103624

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Contextual Tasks in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker who had compromised the renderer process to...

Linux Distros Unpatched Vulnerability : CVE-2026-103626

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in FileSystem in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker leveraging social engineering to potential...

CVE-2026-95284

A buffer overflow flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/556435507...

DEBIAN-CVE-2026-103630

Use after free in FedCM in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...