CVE-2026-106269: Use After Free

Use after free in CSS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

PT-2026-107030

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue in Navigation allows a remote attacker to execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page. Use after free is a memory...

PT-2026-107029

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue exists in WebRTC, which occurs when an application continues to use a pointer after it has been freed. This allows a remote attacker to execute arbitrary code...

PT-2026-107047

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incomplete cleanup in Dawn allows a remote attacker to potentially execute arbitrary code outside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome to versi...

PT-2026-107065

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue exists in the Storage component. This allows a remote attacker who has already compromised the renderer process to execute arbitrary code outside the sandbox by...

PT-2026-106791

Name of the Vulnerable Software and Affected Versions Payload versions prior to 3.90.0 Payload canary versions prior to 4.0.0-canary.34 Description A crafted request to the public first-register operation allows remote code execution. This occurs when local authentication is enabled and no initia...

PT-2026-107128

Name of the Vulnerable Software and Affected Versions GitHub Enterprise Server versions 3.20 through 3.20.8 GitHub Enterprise Server versions 3.21 through 3.21.6 GitHub Enterprise Server versions 3.22 through 3.22.1 Description A Server-Side Request Forgery SSRF issue exists where the secret...

PT-2026-107115

Name of the Vulnerable Software and Affected Versions WeasyPrint versions prior to 70.0 Description The image-loading path in weasyprint/images.py passes image bytes from HTML img URLs, CSS image values, SVG image references, and data URIs to the Pillow generic image dispatcher without excluding...

PT-2026-106906

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue exists in Metrics. This allows a remote attacker who has already compromised the renderer process to execute arbitrary code outside the sandbox by using a special...

PT-2026-106879

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue exists in the PDF component, which allows a remote attacker to execute arbitrary code within the sandbox by using a specially crafted PDF file. Use after free is ...

PT-2026-106875

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue exists in the Track component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attack...

PT-2026-106872

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue in the Browser component allows a remote attacker to execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page. Use after free ...

PT-2026-106921

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue exists in Bindings, which allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted HTML page. Use...

PT-2026-106920

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A buffer overflow exists in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on various graphics platforms. This issue allows a remote attacker who has already compromised...

PT-2026-107083

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue exists in the Parser, which allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted HTML page. Use...

PT-2026-107208

Name of the Vulnerable Software and Affected Versions HPE Networking ClearPass Policy Manager affected versions not specified Description Remote code execution flaws exist in the affected interface, allowing an authenticated remote attacker with high privileges to execute arbitrary code. This cou...

PT-2026-106965

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A buffer overflow exists in the Fonts component. A remote attacker who has already compromised the renderer process can potentially execute arbitrary code outside the sandbox by using a...

PT-2026-107152

Name of the Vulnerable Software and Affected Versions Arista Wi-Fi access points affected versions not specified Description A memory corruption issue exists in the wired uplink network endpoints of the access point. This flaw allows an unauthenticated attacker located on the same network segment...

PT-2026-107093

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue in the PDF component allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted HTML page. Use after...

PT-2026-106868

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue exists in the Parser, which allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted HTML page. Use...