PT-2026-81721

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description A buffer overflow exists in ANGLE, a compatibility layer that translates OpenGL ES calls to other graphics APIs. This flaw allows a remote attacker to execute arbitrary code...

PT-2026-81840

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description Missing authorization in CustomTabs allows a local attacker to potentially execute arbitrary code outside the sandbox via a co-installed app. A sandbox is a security mechanis...

PT-2026-81773

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description Incorrect authorization in WebAppInstalls allows a remote attacker to bypass system access restrictions by using a crafted HTML page. Recommendations Update Google Chrome on...

PT-2026-81636

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description Missing authorization in the Payments component allows a remote attacker to potentially bypass system access restrictions. This is achieved by leveraging social engineering a...

PT-2026-81649

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An information leak exists in the Sharing component that allows a local attacker to obtain sensitive information via a co-installed app by leveraging social engineering...

PT-2026-81634

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An uninitialized resource in the GPU allows a remote attacker to read memory outside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome on Android...

PT-2026-81770

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description A use after free issue exists in the Audio component. This allows a remote attacker who has already compromised the renderer process to execute arbitrary code outside the...

SpringPeace

SpringPeace SpringPeace ist eine GUI/CLI unter GPL-3.0-or-later zur Erstellung von Payload-Kandidaten aus Android boot.img für CVE-2026-43499. Die Windows-App prüft ADB, liest boot.img, erstellt payload.so-Kandidaten und testet sie über ADB in Manifest-Reihenfolge. SpringPeace ist eine GUI/CLI...

CVE-2026-59566

A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on Android and ChromeOS...

EUVD-2026-64882

A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on Android and ChromeOS...

CVE-2026-59566

CVE-2026-59566 is a locally exploitable buffer overflow in Zscaler Client Connector on Android and ChromeOS that can lead to a local denial-of-service. The CVSS 3.1 base score is 8.4 (HIGH) with a vector of AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating low complexity and no privileges or user i...

CVE-2026-59566 Local denial-of-service

A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on Android and ChromeOS...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Mojo in Google Chrome on Android, Linux, and ChromeOS before version 140.0.7339.127 allowed a remote attacker to bypass site isolation through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Insecure security user interfaces in payment-related functions of Google Chrome on Android before version 91.0.4472.77 allowed a remote attacker to perform domain spoofing through a crafted HTML page...

Astra Linux – Vulnerability in Firefox

Memory safety bugs exist in Firefox 111. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability affects Firefox for Android 112, Firefox 112, and Focus for Andro...

Astra Linux – Vulnerability in Chromium

Insecurity-related UI in TabStrip and Navigation in Google Chrome on Android prior to version 89.0.4389.72 allowed a remote attacker to spoof the contents of the Omnibox URL bar through a crafted HTML page...

Astra Linux – Vulnerability in nss

When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used; this resulted in the leakage of partial information regarding the nonce used during signature generation. Given an electro-magnetic trace from several generations of signatures, the private key could...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in the toolbar in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform domain spoofing via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in the Crashpad component of Google Chrome on Android, prior to version 107.0.5304.106, allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...