CVE-2026-102322: Incorrect Authorization

Incorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

CVE-2026-106443: Improper Input Validation

WeasyPrint helps web developers to create PDF documents. Prior to 70.0, the image-loading path in weasyprint/images.py passes fetched image bytes from HTML img URLs, CSS image values, SVG image references, and data URIs to Pillow's generic image dispatcher without excluding EPS or PostScript...

PT-2026-107115

Name of the Vulnerable Software and Affected Versions WeasyPrint versions prior to 70.0 Description The image-loading path in weasyprint/images.py passes image bytes from HTML img URLs, CSS image values, SVG image references, and data URIs to the Pillow generic image dispatcher without excluding...

PT-2026-106930

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue in the HTML component allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted HTML page. Use after...

PT-2026-107044

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in the user interface allows a remote attacker to potentially execute arbitrary code outside the sandbox by using a crafted HTML page. A sandbox is a security...

PT-2026-107045

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue exists in the Fonts component on Windows. This occurs when a remote attacker induces the browser to process a specially crafted HTML page, potentially leading to...

PT-2026-107073

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An out-of-bounds write issue exists in the Media component. This flaw allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing the user to visit a...

PT-2026-107089

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An integer overflow in the Media component allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page. An integ...

PT-2026-106920

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A buffer overflow exists in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on various graphics platforms. This issue allows a remote attacker who has already compromised...

PT-2026-106941

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue exists in WebRTC, which occurs when an application continues to use a pointer after it has been freed. This allows a remote attacker to execute arbitrary code...

PT-2026-106942

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue in the CSS component allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted HTML page. Use after...

PT-2026-106965

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A buffer overflow exists in the Fonts component. A remote attacker who has already compromised the renderer process can potentially execute arbitrary code outside the sandbox by using a...

PT-2026-106906

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue exists in Metrics. This allows a remote attacker who has already compromised the renderer process to execute arbitrary code outside the sandbox by using a special...

PT-2026-106908

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue exists in the WebAudio component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote...

PT-2026-106966

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Type confusion in ANGLE allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Type confusi...

PT-2026-107093

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue in the PDF component allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted HTML page. Use after...

PT-2026-107091

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 155.0.8059.39 Description A Use After Free issue exists in ANGLE, which is a graphics abstraction layer. This flaw allows a remote attacker to execute arbitrary code outside the sandbox by inducing th...

PT-2026-107030

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue in Navigation allows a remote attacker to execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page. Use after free is a memory...

PT-2026-107018

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Improper state validation in DevTools allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Update Google Chrom...

PT-2026-106879

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue exists in the PDF component, which allows a remote attacker to execute arbitrary code within the sandbox by using a specially crafted PDF file. Use after free is ...