97486 matches found
CVE-2026-10967: Use After Free
Use after free in SurfaceCapture in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-11226: Origin Validation Error
Insufficient policy enforcement in PreviewTab in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-11167: Execution with Unnecessary Privileges
Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-11082: Use After Free
Race in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
PT-2026-46600
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 149.0.7827.53 Description A use after free issue exists in the WebView component, which allows a local attacker to execute arbitrary code by utilizing a malicious file. Use after free is a memory...
CVE-2026-11072: Use After Free
Use after free in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to execute arbitrary code via a malicious file. Chromium security severity: Medium...
CVE-2026-11034: Improper Input Validation
Insufficient validation of untrusted input in Tab Group Sync in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via malicious network traffic. Chromium security severity: Medium...
PT-2026-46564
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 149.0.7827.53 Description An inappropriate implementation in Custom Tabs allows a local attacker to perform privilege escalation by using a crafted XML file. Recommendations Update to version...
CVE-2026-10959: Use After Free
Use after free in Input in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
The vulnerability in the KeyguardViewMediator.java class of Android operating systems allows a hacker to disclose protected information.
The vulnerability in the KeyguardViewMediator.java class of Android operating systems is related to incorrect code generation management. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by the system’s security measures...
The vulnerability of the getPreferredSize() function in the LauncherProcessImageListener.kt script on Android operating systems allows a hacker to trigger a service failure.
The vulnerability of the getPreferredSize function in the LauncherProcessImageListener.kt script on Android operating systems is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the `applySimpleFieldMaxSize` method in the `DataRowHandler.java` class in Android operating systems allows a hacker to cause a service failure.
The vulnerability of the applySimpleFieldMaxSize method in the DataRowHandler.java class of Android operating systems is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the Framework component in Android operating systems, which allows a hacker to increase their privileges
The vulnerability of the Framework component in Android operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability in the ComputerEngine.java class of the Android operating system’s Framework component allows a perpetrator to increase their privileges.
The vulnerability in the ComputerEngine.java class of the Android operating system’s Framework component is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability in the l2c_fcr_clone_buf scenario of l2c_fcr.cc in Android operating systems allows attackers to increase their privileges.
The vulnerability in the l2cfcrclonebuf section of the l2cfcr.cc code in Android operating systems is related to a numerical overflow. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
The vulnerability of the getAppLabel method in the ForgetDeviceDialogFragment.java class of Android operating systems allows a hacker to escalate their privileges.
The vulnerability of the getAppLabel method in the ForgetDeviceDialogFragment.java class of Android operating systems is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the onNullBinding method in the HostEmulationManager.java class of Android operating systems allows a hacker to exploit their privileges.
The vulnerability of the onNullBinding method in the HostEmulationManager.java class in Android operating systems is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to enhance their privileges...
The vulnerability of the isSameApp method in the NotificationManagerService.java class of Android operating systems allows a hacker to trigger a service failure.
The vulnerability of the isSameApp method in the NotificationManagerService.java class of Android operating systems is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a attacker to cause a service failure...
The vulnerability of the `updateState` method in the `GraphicsDriverEnableAngleAsSystemDriverController.java` class in Android operating systems allows a hacker to cause a service failure.
The vulnerability of the updateState method in the GraphicsDriverEnableAngleAsSystemDriverController.java class in Android operating systems is related to incorrect handling of exceptional states. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the PipTaskOrganizer.java class in the Android operating system framework allows a hacker to escalate their privileges.
The vulnerability of the PipTaskOrganizer.java class in the Android operating system framework relates to the possibility of bypassing access control mechanisms. Exploiting this vulnerability can allow attackers to enhance their privileges...