Brave Android 1.88.128 Security Fixes

Fixed race condition which could result in incorrect origin being displayed on Brave Wallet as reported on HackerOne by b4dc4t. Upgraded Chromium to 146.0.7680.111 — refer to Google Chrome advisories for inherited CVEs...

PT-2026-24829

Name of the Vulnerable Software and Affected Versions Lenovo FileZ Android application affected versions not specified Description A potential issue exists in the Lenovo FileZ Android application where a locally authenticated user might be able to access sensitive data contained within a log file...

CVE-2026-3937: User Interface (UI) Misrepresentation of Critical Information

Incorrect security UI in Downloads in Google Chrome on Android prior to 146.0.7680.71 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-3936: Use After Free

Use after free in WebView in Google Chrome on Android prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-3932: Improper Access Control

Insufficient policy enforcement in PDF in Google Chrome on Android prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-3925: User Interface (UI) Misrepresentation of Critical Information

Incorrect security UI in LookalikeChecks in Google Chrome on Android prior to 146.0.7680.71 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-0520: Insertion of Sensitive Information into Log File

A potential vulnerability was reported in the Lenovo FileZ Android application that, under certain conditions, could allow a local authenticated user to retrieve some sensitive data stored in a log file...

Vulnerability fixed in Microsoft Authenticator app

Microsoft has fixed a vulnerability in the Authenticator app for Android and iOS. A malicious party could exploit the vulnerability to gain access to sensitive data. Successful abuse requires the malicious party to trick the victim into installing a rogue app. This app can then be misused to...

EUVD-2026-10503

Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android. This vulnerability affects Firefox 148.0.2...

EUVD-2026-10502

Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android. This vulnerability affects Firefox 148.0.2...

EUVD-2026-10489

HCL Sametime for Android is impacted by a sensitive information disclosure. Hostnames information is written in application logs and certain URL...

EUVD-2026-10488

HCL Sametime for Android is impacted by a sensitive information disclosure. Hostnames information is written in application logs and certain URL...

CVE-2026-3845

Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android. This vulnerability was fixed in Firefox 148.0.2...

CVE-2026-3845

Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android. This vulnerability affects Firefox 148.0.2...

CVE-2026-21791

HCL Sametime for Android is impacted by a sensitive information disclosure. Hostnames information is written in application logs and certain URL...

CVE-2026-3845

Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android. This vulnerability was fixed in Firefox 148.0.2...

CVE-2026-3845 Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android

Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android. This vulnerability was fixed in Firefox 148.0.2...

CVE-2026-3845

Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android. This vulnerability affects Firefox 148.0.2...

CVE-2026-3845

A heap buffer overflow exists in the Audio/Video: Playback component of the Mozilla Firefox browser for Android . This vulnerability occurs due to a buffer overflow in dynamic memory during playback. A remote attacker could exploit this flaw to achieve arbitrary code execution . The issue is fixe...

CVE-2026-3845 Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android

Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android. This vulnerability was fixed in Firefox 148.0.2...