CVE-2026-87597

A flaw was found in Google Chrome's CustomTabs component on Android. A remote attacker, by leveraging a co-installed application, could exploit a user interface UI misrepresentation vulnerability. This could allow the attacker to spoof the address bar, potentially deceiving users about the...

DEBIAN-CVE-2026-87597

UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. Chromium security severity: Low...

CVE-2026-78949

A flaw was found in Google Chrome CustomTabs. A local attacker, by using a co-installed application, could exploit an observable discrepancy within CustomTabs. This vulnerability could allow the attacker to obtain sensitive cross-origin data, leading to unauthorized information disclosure...

CVE-2026-79152

Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to bypass web origin policy via a co-installed app. Chromium security severity: Low...

CVE-2026-79222

Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to bypass web origin policy via a co-installed app. Chromium security severity: Medium...

Linux Distros Unpatched Vulnerability : CVE-2026-13955

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in CustomTabs in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to perform UI spoofing via ...

CVE-2026-13863

The CVE-2026-13863 entry describes insufficient validation of untrusted input in CustomTabs for Google Chrome on Android, prior to version 150.0.7871.47, enabling a local privilege escalation via a malicious file. Affected component: Chrome’s CustomTabs on Android; root cause: inadequate input va...

Linux Distros Unpatched Vulnerability : CVE-2026-11247

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in CustomTabs in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a craft...