CVE-2026-12469

Google Chrome on Android is vulnerable to an uninitialized use in the GPU component prior to version 149.0.7827.155 . A remote attacker can exploit this flaw by tricking a user into visiting a crafted HTML page , which could lead to the leak of cross-origin data . This issue is classified as High...

CVE-2026-12452

Use after free in Downloads in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2026-12452

Use after free in Downloads in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2026-12452

Use after free in Downloads in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2026-12452

A Use after free vulnerability exists in the Downloads component of Google Chrome on Android versions prior to 149.0.7827.155 . A remote attacker can exploit this via a crafted HTML page to cause heap corruption . Potential impacts include Arbitrary Code Execution (ACE) , Denial of Service (DoS) ...

CVE-2026-12448

Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: High...

CVE-2026-12448

A high-severity privilege escalation vulnerability exists in the WebView component of Google Chrome on Android prior to version 149.0.7827.155 . The flaw stems from an inappropriate implementation that allows a remote attacker to escalate privileges through a crafted HTML page. Impacted products ...

CVE-2026-12448

Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: High...

CVE-2026-12448

Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: High...

CVE-2026-12442

Use after free in Passwords in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-12442

Use after free in Passwords in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-12442

Google Chrome on Android (prior to 149.0.7827.155 ) is vulnerable to a use after free flaw in the Passwords component. A remote attacker can exploit this by utilizing a crafted HTML page to achieve arbitrary code execution (ACE). Exploitation can also lead to denial of service (DoS) or code injec...

CVE-2026-12442

Use after free in Passwords in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-12438

An inappropriate implementation in the WebView component of Google Chrome on Android (prior to version 149.0.7827.155) allows a remote attacker who has already compromised the renderer process to perform a sandbox escape using a crafted HTML page. This vulnerability is classified with a Critical ...

CVE-2026-12438

Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-12438

Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-12438

Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-12348: Improper Restriction of Rendered UI Layers or Frames

Address bar spoofing in Arc Search for Android allows a remote attacker to display a trusted domain in the address bar while rendering attacker-controlled content, enabling phishing...

The vulnerability of Microsoft Word text editor and Microsoft Excel spreadsheet editors on Android operating systems, related to lack of access control, allows attackers to perform spear-phishing attacks.

The vulnerabilities of Microsoft Word text editor and Microsoft Excel electronic spreadsheet editors on Android operating systems are related to lack of access control mechanisms. Exploiting these vulnerabilities can allow attackers to carry out spear-phishing attacks...

The vulnerability of Microsoft Bing Search’s search system on Android operating systems, related to information representation errors in the user interface, allows attackers to perform spearishing attacks.

The vulnerability of Microsoft Bing Search’s search engine on Android operating systems is related to information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...