CVE-2026-121229

Memory corruption in ANGLE in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

EUVD-2026-116500

Use after free in WebGL in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-121246

Google Chrome on Android versions prior to 157.0.8103.38 is vulnerable to a Use after free flaw in the WebGL component. A remote attacker could exploit this vulnerability by using a crafted HTML page to potentially achieve arbitrary code execution outside the sandbox. The vulnerability is classif...

CVE-2026-121554

cordova-plugin-advanced-http 1.5.0 through 3.3.1 contains an information disclosure vulnerability that leaks cookies to third-party hosts because the JavaScript layer passes jar-built Cookie headers as ordinary request headers. When a request is redirected to another host via an open or...

CVE-2026-121554 cordova-plugin-advanced-http 1.5.0 through 3.3.1 Cookie Leak via Cross-Origin Redirects

cordova-plugin-advanced-http 1.5.0 through 3.3.1 contains an information disclosure vulnerability that leaks cookies to third-party hosts because the JavaScript layer passes jar-built Cookie headers as ordinary request headers. When a request is redirected to another host via an open or...

CVE-2026-121554

The cordova-plugin-advanced-http library, versions 1.5.0 through 3.3.1 , is vulnerable to an information disclosure flaw. The root cause is that the JavaScript layer passes jar-built Cookie headers as ordinary request headers. Consequently, if a request is redirected to a third-party host via an ...

A hidden backdoor put 1.3 million set-top boxes to work for criminals

.kadence-column4841751ef361-88 .kt-inside-inner-colpadding-top:20px;padding-right:20px;padding-bottom:10px;padding-left:20px;.kadence-column4841751ef361-88 .kt-inside-inner-colcolumn-gap:var--global-kb-gap-sm, 1rem;.kadence-column4841751ef361-88...

Adhrit

Adhrit is an open source Android APK reversing and analysis suite. The tool is an effort to find an efficient solution to all the needs of mobile security testing and automation. Adhrit has been built with a focus on flexibility and mudularization. Adhrit currently uses the Ghera benchmarks to...

K0mraid3s-System-Shell-PREBUILT

K0mraid3s-System-Shell Way back in 2019, a vulnerability that would come to be known as "CVE-2019-16253" was found that affect Samsung's TTS engine in versions prior to 3.0.02.7. This exploit allowed for a local attacker to escalate privileges to system privileges and was later patched by Samsung...

Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies

Google said today it worked with industry partners to dismantle a botnet made up of more than 1.3 million Android TV set-top boxes that ship with malicious software which secretly rents the user's Internet connection out to strangers and conducts advertising fraud. Experts involved in the takedow...

CVE-2026-121116: Google Chrome: Missing authorization in WebView in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker who…

Missing authorization in WebView in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121042: Google Chrome: Incorrect authorization in Permissions in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker…

Incorrect authorization in Permissions in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

Google Chrome authorization issue vulnerability

Google Chrome on Android versions prior to 157.0.8103.38 contains an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks in WebView. Remote attackers with control over the rendering process can exploit this flaw by sending specially crafted HTML pages,...

CVE-2026-121554: silkimen cordova-plugin-advanced-http: cordova-plugin-advanced-http 1.5.0 through 3.3.1 contains an information disclosure vulnerability that leaks cookies to…

cordova-plugin-advanced-http 1.5.0 through 3.3.1 contains an information disclosure vulnerability that leaks cookies to third-party hosts because the JavaScript layer passes jar-built Cookie headers as ordinary request headers. When a request is redirected to another host via an open or...

PT-2026-136460

Incorrect authorization in Permissions in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121074: Google Chrome: Memory corruption in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially…

Memory corruption in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

Google Chrome resource management error vulnerability

Google Chrome on Android versions prior to 157.0.8103.38 contains a resource management error vulnerability. This vulnerability stems from use-after-free issues in Navigation, which may allow remote attackers to execute arbitrary code outside the sandbox via specially crafted HTML pages...

PT-2026-136490

Memory corruption in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-136522

Information leak in Omnibox in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to leak sensitive information via UI Interaction. Chromium security severity: Medium...

PT-2026-136526

UI misrepresentation in Shopping in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...