PT-2026-54305

Name of the Vulnerable Software and Affected Versions Google Chrome on Linux versions prior to 150.0.7871.47 Description An inappropriate implementation in the SplitView feature allows a remote attacker to spoof the contents of the Omnibox the browser's URL bar using a crafted HTML page. This...

PT-2026-54317

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description An inappropriate implementation in Isolated Web Apps allows a remote attacker to perform UI spoofing, which is the act of mimicking a legitimate user interface to deceive users, by usin...

PT-2026-54345

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description An integer overflow in WebNN allows a remote attacker to obtain potentially sensitive information from process memory by using a crafted HTML page. WebNN is an API that enables web...

PT-2026-54175

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description A use after free issue exists in the Cast Receiver component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remot...

PT-2026-54287

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description An out of bounds read exists in SurfaceCapture, which allows a remote attacker to perform an out of bounds memory read by using a crafted HTML page. An out of bounds read occurs when th...

PT-2026-54199

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description Side-channel information leakage in the Paint component allows a remote attacker to leak cross-origin data by using a crafted HTML page. Side-channel leakage occurs when information is...

PT-2026-54379

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description Insufficient validation of untrusted input in WebAppInstalls allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Recommendations Update Google...

PT-2026-54418

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 150.0.7871.47 Description Incorrect security UI in the Passwords feature allows a remote attacker to perform UI spoofing, which is the act of mimicking a legitimate user interface to deceive users, by usi...

PT-2026-54290

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description An inappropriate implementation in the Paint component allows a remote attacker to perform UI spoofing, which is the act of mimicking a legitimate user interface to deceive users, by...

PT-2026-54229

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description An inappropriate implementation in the SplitView feature allows a remote attacker who has already compromised the renderer process to bypass navigation restrictions by using a specially...

PT-2026-54149

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 150.0.7871.47 Description Insufficient validation of untrusted input in the WebAppInstalls component occurs when handling Web App install-related data. This trust boundary failure allows crafted file...

PT-2026-54424

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description A use after free issue exists in the Audio component on Linux. This occurs when a remote attacker induces the browser to process a specially crafted HTML page, which can lead to arbitra...

PT-2026-53822

Name of the Vulnerable Software and Affected Versions Ricoh Web Image Monitor affected versions not specified Description Ricoh Web Image Monitor contains a reflected cross-site scripting issue. This allows an arbitrary script to be executed within the web browser of a user who accesses the...

Apple Safari resource management error vulnerability (CNVD-2026-28245)

Apple Safari is a web browser designed for the Apple operating system. Apple Safari has a resource management vulnerability, which stems from improper memory management leading to incorrect memory references. Attackers can exploit this vulnerability by processing maliciously crafted web content,...

PT-2026-54403

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 150.0.7871.47 Description An improper implementation in the browser allows a remote attacker to spoof the contents of the Omnibox the address and search bar by using a specially crafted HTML page...

Apple Safari buffer overflow vulnerability (CNVD-2026-26364)

Safari is a web browser developed by Apple Inc., whose main function is to browse web content. Apple Safari has security vulnerabilities; these vulnerabilities arise due to improper handling of maliciously constructed web content. Attackers can exploit these vulnerabilities to cause memory...

Apple Safari path traversal vulnerability (CNVD-2026-26335)

Apple Safari is a web browser developed by Apple Inc., integrated into iOS, iPadOS, and macOS systems. It supports web browsing and rendering functions. Apple Safari has a path traversal vulnerability, which stems from an inability to correctly verify file paths. Attackers can exploit this...

PT-2026-54059

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description A use after free issue exists in the Browser component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote...

Apple Safari buffer overflow vulnerability (CNVD-2026-26434)

Apple Safari is a web browser developed by Apple Inc., primarily used on iOS, iPadOS, and macOS systems. It provides web browsing functionality. Apple Safari has a buffer overflow vulnerability. This vulnerability stems from insufficient validation of boundary checks. Attackers can exploit this...

Apple Safari buffer overflow vulnerability (CNVD-2026-26435)

Apple Safari is the default web browser integrated in iOS, iPadOS, and macOS systems, used for browsing internet content on Apple devices. Apple Safari has a buffer overflow vulnerability. This vulnerability stems from improper handling of maliciously crafted web content. Attackers can exploit th...