CVE-2026-79152

A flaw was found in Google Chrome CustomTabs. A local attacker could exploit incorrect authorization to bypass the web origin policy through a co-installed application. This bypass could allow unauthorized access to web content...

CVE-2026-87597

A flaw was found in Google Chrome's CustomTabs component on Android. A remote attacker, by leveraging a co-installed application, could exploit a user interface UI misrepresentation vulnerability. This could allow the attacker to spoof the address bar, potentially deceiving users about the...

DEBIAN-CVE-2026-87597

UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. Chromium security severity: Low...

SUSE CVE-2026-79086

Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain sensitive information via a co-installed app. Chromium security severity: Medium...

CVE-2026-78949

A flaw was found in Google Chrome CustomTabs. A local attacker, by using a co-installed application, could exploit an observable discrepancy within CustomTabs. This vulnerability could allow the attacker to obtain sensitive cross-origin data, leading to unauthorized information disclosure...

CVE-2026-79222

An incorrect authorization flaw was found in the CustomTabs component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=496195129...

CVE-2026-79152

Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to bypass web origin policy via a co-installed app. Chromium security severity: Low...

CVE-2026-79222

Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to bypass web origin policy via a co-installed app. Chromium security severity: Medium...

Linux Distros Unpatched Vulnerability : CVE-2026-13955

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in CustomTabs in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to perform UI spoofing via ...

CVE-2026-13863

Insufficient validation of untrusted input in CustomTabs in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to perform privilege escalation via a malicious file. Chromium security severity: Medium...

Linux Distros Unpatched Vulnerability : CVE-2026-11247

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in CustomTabs in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a craft...