ANGLE: chromium-browser: angle: ANGLE: Arbitrary code execution outside sandbox via crafted HTML page

A flaw was found in ANGLE, a component used in Google Chrome on Android. A remote attacker, who has already compromised the renderer process, could exploit a buffer overflow vulnerability by tricking a user into visiting a specially crafted HTML page. This could allow the attacker to execute...

chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page

A flaw was found in ANGLE, a component of Google Chrome on Android. This 'use after free' vulnerability allows a remote attacker to execute arbitrary code outside the browser's security sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page. Successful exploitati...

chromium-browser: angle: Google Chrome's ANGLE component: Sandbox escape via out-of-bounds memory access

A flaw was found in Google Chrome's ANGLE component on Android. A remote attacker could exploit an out-of-bounds memory access vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to escape the browser's security sandbox, leading to...

chromium-browser: angle: ANGLE: Sandbox escape via out-of-bounds write in Google Chrome on Android

A flaw was found in ANGLE, a component within Google Chrome on Android. This out-of-bounds write vulnerability allows a remote attacker to potentially perform a sandbox escape by enticing a user to visit a specially crafted HTML page. This could lead to an attacker executing arbitrary code outsid...

EUVD-2026-117175

Alan: Health Insurance for Android com.alanmobile 1.450.0 contains a path traversal vulnerability that allows a co-resident malicious application to write attacker-controlled files outside the intended directory via the exported ShareReceiverActivity, which uses an unsanitized displayname value...

EUVD-2026-117152

VitaFit Android application com.vt.vitafit before 2.8.1.0 contains an insecure custom URI scheme vulnerability that allows a malicious application to intercept Fitbit login tokens by registering the same callback scheme vitafit://vtio.cn. Attackers can capture the 30-day Fitbit authorization toke...

EUVD-2026-117149

VitaFit Android application com.vt.vitafit before 2.8.1.0 contains an insecure session management vulnerability that allows attackers to extract or intercept unencrypted msessionid tokens stored in application backups, which remain valid for ten years. Attackers can use a stolen session token to...

EUVD-2026-117148

VitaFit Android application com.vt.vitafit before 2.8.1.0 contains a hardcoded credentials vulnerability that allows attackers to extract confidential third-party integration secrets by decompiling the APK. Attackers can retrieve embedded WeChat, Tencent QQ, and Fitbit credentials from the...

EUVD-2026-117146

VitaFit Android application com.vt.vitafit before 2.8.1.0 contains an insecure TLS/SSL certificate validation vulnerability that allows network-based attackers to intercept and modify HTTPS traffic by exploiting a custom X509TrustManager that trusts all certificates and a hostname verifier that...

EUVD-2026-117147

VitaFit Android application com.vt.vitafit before 2.8.1.0 contains a cleartext traffic vulnerability that allows network-based attackers to intercept or modify unencrypted HTTP communications due to the absence of an Android network security configuration. Attackers on an untrusted network can...

CVE-2026-106715

NewsBreak for Android version 26.21.0 contains a vulnerability where the WebView JavaScript bridge origin check improperly treats data:text/html; URLs as trusted. An attacker can leverage the newsbreak://openweb deep link to supply a crafted page that invokes NBJS.callNative with the getLoginInfo...

EUVD-2026-117511

An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive information via the com.dramawave.feature.web.WebPageActivity component...

CVE-2026-106713

An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive information through the com.dramawave.feature.web.WebPageActivity component. No specific root cause, remediation steps, or exploit details are provided in the documents.

EUVD-2026-117513

NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView JavaScript bridge origin check. An attacker can supply such a page through the newsbreak://openweb deep link and invoke NBJS.callNative with the getLoginInfo action, disclosing a signed-in user's account...

EUVD-2026-117512

Chewy for Android version 26.23.0 does not adequately validate the host of a product-details deep link before loading it in a Hybrid WebView. An attacker-controlled page with a /dp/ path can access the injected nmapetmdbridge JavaScript interface and invoke getPetProfiles, disclosing a signed-in...

CVE-2026-106714

Chewy for Android version 26.23.0 is vulnerable to a deep link security issue because it fails to adequately validate the host of a product-details deep link before loading it in a Hybrid WebView . An attacker can use a crafted page with a /dp/ path to access the injected nma_petmd_bridge JavaScr...

EUVD-2026-117514

ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl supplied through its cmsvictor://open deep link in a WebView that exposes the Android and Offerwall JavaScript bridges without validating the page origin. After a user opens the crafted link, the page can invoke...

CVE-2026-106716

ReelShort for Android version 3.8.55 is vulnerable to a security flaw where it loads an attacker-controlled activityUrl via the cmsvictor://open deep link. The application fails to validate the page origin within a WebView , exposing the Android and Offerwall JavaScript bridges . An attacker can ...

CVE-2026-58128

Alan: Health Insurance for Android com.alanmobile 1.450.0 contains a path traversal vulnerability that allows a co-resident malicious application to write attacker-controlled files outside the intended directory via the exported ShareReceiverActivity, which uses an unsanitized displayname value...

CVE-2026-54374

VitaFit Android application com.vt.vitafit before 2.8.1.0 contains a hardcoded credentials vulnerability that allows attackers to extract confidential third-party integration secrets by decompiling the APK. Attackers can retrieve embedded WeChat, Tencent QQ, and Fitbit credentials from the...