CVE-2026-79213

An incorrect authorization vulnerability in the WebAppInstalls component of Google Chrome on Android (prior to version 152.0.7977.65 ) allowed a remote attacker to bypass system access restrictions by serving a crafted HTML page. The vulnerability was rated Medium by Chromium and scored CVSS 4.3 ...

CVE-2026-79213

Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79086

Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain sensitive information via a co-installed app. Chromium security severity: Medium...

CVE-2026-79086

CVE-2026-79086 is a missing authorization flaw in the CustomTabs component of Google Chrome on Android , affecting versions prior to 152.0.7977.65 . A local attacker, through a co-installed application , can obtain sensitive user information , resulting in unauthorized data disclosure. Chromium r...

CVE-2026-79086

Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain sensitive information via a co-installed app. Chromium security severity: Medium...

CVE-2026-79057

Race condition in Start in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a co-installed app. Chromium security severity: Medium...

CVE-2026-79057

Race condition in Start in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a co-installed app. Chromium security severity: Medium...

CVE-2026-79057

A race condition in the Start component of Google Chrome on Android (prior to version 152.0.7977.65 ) allows a local attacker, leveraging social engineering and a co-installed application , to potentially execute arbitrary code outside the browser's security sandbox. Successful exploitation could...

CVE-2026-79210

Use after free in Audio in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79046

Race condition in Permissions in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65855

Use after free in Audio in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79129

Use after free in Sessions in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: Medium...

CVE-2026-78937

Use after free in Search in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79210

Use after free in Audio in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79129

Use after free in Sessions in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: Medium...

CVE-2026-78937

CVE-2026-78937 is a use-after-free vulnerability in the Search component of Google Chrome on Android , affecting versions prior to 152.0.7977.65 . A remote attacker leveraging social engineering can potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium rated thi...

CVE-2026-79129

CVE-2026-79129 is a use-after-free vulnerability in the Sessions component of Google Chrome on Android , affecting versions prior to 152.0.7977.65 . A remote attacker leveraging social engineering can achieve arbitrary code execution outside the sandbox via UI interaction. The CNA-assigned CVSS 3...

CVE-2026-78937

Use after free in Search in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79046

Race condition in Permissions in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79210

Use after free in Audio in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...