PT-2026-88453

HTML::FormHandler versions before 0.410002 for Perl render field attributes into HTML without escaping using the process attrs method. Any application with fields or field labels where some attributes are built from data rather than literals allows attacker-influenced text in an attribute value...

PT-2026-88747

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An uninitialized resource in the GPU allows a remote attacker who has compromised the renderer process to read memory outside the sandbox by using a crafted HTML page. Recommendations...

PT-2026-88672

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An injection issue in DevTools allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a crafted HTML page...

PT-2026-88689

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in SiteIsolation allows a remote attacker who has compromised the renderer process to bypass system access restrictions by using a crafted HTML page. SiteIsolati...

PT-2026-88533

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A race condition exists in the FileAPI. This allows a remote attacker who has already compromised the renderer process to bypass site isolation, which is a security mechanism used to...

PT-2026-88535

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An information leak exists in the ControlledFrame component. A remote attacker who has already compromised the renderer process can obtain sensitive information by using a specially...

PT-2026-88706

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Missing authorization in SiteIsolation allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted HTML page. Site isolation is a...

PT-2026-88718

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An incorrect reference resolution in Storage on Windows allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by...

PT-2026-88748

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue exists in ANGLE on Windows. This occurs when a remote attacker, having already compromised the renderer process, uses a specially crafted HTML page to potentially...

EUVD-2026-74262

In Halo = 2.25.4, the plugin management feature allows users to install/update malicious plugins, which could let attackers execute any command with Halo process permissions...

PT-2026-88595

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An information leak exists in the Scroll component. A remote attacker who has compromised the renderer process can leak cross-origin data by using a crafted HTML page. Recommendations...

CVE-2026-9034: Use After Free

Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access already freed...

PT-2026-87106

Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access already freed...

CVE-2026-78625: Improper Control of Generation of Code

The Okta Access Gateway does not sanitize dashboard label values before writing them into generated PHP configuration files. The generated file is automatically included during authentication requests, resulting in execution with the privileges of the web server process...

PT-2026-88587

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Missing authorization in the FileSystem component allows a remote attacker to potentially execute arbitrary code outside the sandbox. This requires the attacker to have already...

PT-2026-88520

A flaw was found in DPDK lib/vhost. Missing length validation before reading command data in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash...

PT-2026-88631

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An information leak exists in the Cross-Origin Resource Sharing CORS implementation. A remote attacker who has already compromised the renderer process can use a crafted HTML page to...

PT-2026-88551

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An information leak exists in the Downloads component. A remote attacker who has compromised the renderer process can obtain cross-origin data by using a crafted HTML page...

PT-2026-88556

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An uninitialized resource in the Media component allows a remote attacker who has already compromised the renderer process to read memory outside the sandbox by using a crafted HTML pag...

PT-2026-88714

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the ServiceWorker allows a remote attacker who has compromised the renderer process to bypass the web origin policy using a crafted HTML page. The web origin...