PT-2026-81805

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue exists in the UI. This allows a local attacker who has compromised the renderer process to execute arbitrary code outside the sandbox via a local program. Use aft...

PT-2026-81815

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in WebRTC allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. WebRTC Web Real-Time...

PT-2026-81827

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A race condition in Workers allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. A race condition occurs when t...

PT-2026-81623

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in Workers allows a remote attacker who has compromised the renderer process to bypass system access restrictions by using a crafted HTML page. Recommendations...

PT-2026-81652

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in the password handling mechanism allows a remote attacker who has compromised the renderer process to spoof UI elements by using a crafted HTML page...

PT-2026-81689

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the input component allows a remote attacker to bypass the web origin policy. This occurs when an attacker has already compromised the renderer process and...

PT-2026-81831

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the FindInPage function allows a remote attacker who has compromised the renderer process to leak cross-origin data through a crafted HTML page...

PT-2026-81578

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in the BFCache Back-Forward Cache, a browser feature that stores a complete page in memory to allow instant loading when navigating back or forward allows a remote...

PT-2026-81525

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A race condition in the Payments component allows a remote attacker who has compromised the renderer process to leak cross-origin data through a crafted HTML page. A race condition occu...

PT-2026-81564

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in SiteIsolation allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted PDF file. Site isolation is a securi...

PT-2026-81648

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue exists in Chromecast. A remote attacker who has compromised the renderer process can execute arbitrary code outside the sandbox by using a crafted HTML page. Use...

PT-2026-81657

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in Navigation allows a remote attacker who has compromised the renderer process to bypass site isolation through a crafted HTML page. Site isolation is a...

PT-2026-81671

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper enforcement of behavioral workflow in Media allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox via a...

PT-2026-81687

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in Sensor allows a remote attacker who has compromised the renderer process to obtain sensitive information through a crafted HTML page. Recommendations Update...

PT-2026-81816

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An externally controlled reference in the WebView component allows a remote attacker who has already compromised the renderer process to potentially execute arbitrary code...

PT-2026-81589

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use-after-free issue exists in Views, which allows a remote attacker who has already compromised the renderer process to execute arbitrary code outside the sandbox. This is achieved b...

PT-2026-81712

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description Improper input validation allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a crafted HTML...

PT-2026-81653

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak exists in the BFCache Back-Forward Cache, a browser feature that stores a complete page in memory to allow instant loading when navigating back or forward. This issu...

PT-2026-81551

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue exists in Chromecast. A remote attacker who has compromised the renderer process can execute arbitrary code outside the sandbox by using a crafted HTML page. Use...

PT-2026-81692

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Printing component allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using ...