PT-2026-54128

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 150.0.7871.47 Description Insufficient validation of untrusted input in WebAppInstalls allows a local attacker to bypass discretionary access control, which is a security mechanism that restricts acce...

PT-2026-54129

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 150.0.7871.47 Description Insufficient validation of untrusted input in WebAppInstalls allows a local attacker to bypass discretionary access control, which is a security mechanism that restricts acce...

PT-2026-54145

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 150.0.7871.47 Description An inappropriate implementation in the Network component allows a remote attacker who has compromised the renderer process to bypass site isolation. This is achieved through...

PT-2026-54200

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 150.0.7871.47 Description An uninitialized use in the GPU component allows a remote attacker to obtain potentially sensitive information from process memory. This is achieved by inducing the victim to...

PT-2026-54409

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 150.0.7871.47 Description An inappropriate implementation in the Autofill feature allows a remote attacker to perform UI spoofing via a crafted HTML page. UI spoofing is a technique where an attacker...

Google Android has an unknown vulnerability (CNVD-2026-26390)

Google Android is an operating system based on Linux, open-sourced by Google Inc. There are security vulnerabilities in Google Android, which stem from a lack of boundary checks in the mfccorenalqgetdecmetadataseinal function in mfccorenal.q. Attackers can exploit these vulnerabilities to execute...

Google Android Permission Licensing and Access Control Vulnerabilities (CNVD-2026-26369)

Google Android is an open-source operating system based on Linux, developed by Google Inc. There are security vulnerabilities in Google Android. Attackers can exploit these vulnerabilities to gain local privileges...

Google Android Configuration Error Vulnerability

Google Android is an open-source operating system based on Linux, developed by Google Inc. Google Android has a configuration vulnerability that stems from unsafe default values in the NfcDispatcher.java file. Attackers can exploit this vulnerability to gain local privileges...

Google Android competition conditions issue vulnerability (CNVD-2026-26393)

Google Android is an open-source operating system based on Linux, developed by Google Inc. Google Android has a vulnerability known as a race condition. This vulnerability stems from a persistent synchronization issue within the createSessionInternal function in PackageInstallerService.java...

Google Android competition conditions issue vulnerability (CNVD-2026-29387)

Google Android is an open-source operating system based on Linux, developed by Google Inc. Google Android has vulnerabilities that can lead to local privilege escalation when exploited by attackers...

Google Android SQL Injection Vulnerability (CNVD-2026-29386)

Google Android is an open-source operating system based on Linux, developed by Google Inc. Google Android has a SQL injection vulnerability. This vulnerability stems from the lack of validation for SQL statements submitted from external inputs by the Contacts Provider. Attackers can exploit this...

Google Android Buffer Overflow Vulnerability (CNVD-2026-29391)

Google Android is an operating system based on Linux, open-sourced by Google Inc. in the United States. Google Android has a buffer overflow vulnerability, which stems from the lack of boundary checks in the RTCP packet decoder. Attackers can exploit this vulnerability to cause remote information...

Google Android Authorization Vulnerability (CNVD-2026-26201)

Google Android is an open-source operating system based on Linux, developed by Google Inc. There are security vulnerabilities in Google Android. Attackers can exploit these vulnerabilities to cause local information leaks...

Google Android Permission Elevation Vulnerability (CNVD-2026-29393)

Google Android is an operating system based on Linux, open-sourced by Google Inc. in the United States. Google Android has a privilege escalation vulnerability. This vulnerability stems from the confusion in the instructions for releasing memory in the lwisdeviceexternaleventemit function found i...

Google Android Processing Logic Vulnerability

Google Android is an open-source operating system based on Linux, developed by Google Inc. There is a processing logic vulnerability in Google Android, and attackers can exploit this vulnerability to cause remote information leaks. User interaction is required to utilize this vulnerability...

Google Android Buffer Overflow Vulnerability (CNVD-2026-29392)

Google Android is an operating system based on Linux, open-sourced by Google Inc. in the United States. Google Android has a buffer overflow vulnerability, which stems from the lack of boundary checks in the lwisiobuffer.c function. Attackers can exploit this vulnerability to gain local privilege...

Google Android Authorization Vulnerability (CNVD-2026-26392)

Google Android is an operating system based on Linux, open-sourced by the American company Google. Google Android has authorization-related vulnerabilities; these vulnerabilities stem from the lack of permission checks. Attackers can exploit these vulnerabilities to gain higher levels of access...

PT-2026-54103

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 150.0.7871.47 Description An inappropriate implementation in the Autofill feature allows a remote attacker who has already compromised the renderer process to leak cross-origin data. This is achieved ...

CVE-2026-13969: Use of Uninitialized Variable

Uninitialized Use in UI in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13826: Origin Validation Error

Inappropriate implementation in Autofill in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...