CVE-2026-78936

CVE-2026-78936 affects Google Chrome on Android prior to version 152.0.7977.65 . The vulnerability resides in the CustomTabs component, where an observable discrepancy could be leveraged by a local attacker to obtain cross-origin data through a co-installed app. The Chromium project classifies th...

CVE-2026-79057

CVE-2026-79057 is a race condition in the Start component of Google Chrome on Android , affecting versions prior to 152.0.7977.65 . A local attacker leveraging social engineering could potentially execute arbitrary code outside the sandbox via a co-installed app. The Chromium security team rated ...

CVE-2026-79117

CVE-2026-79117 is a race condition in the WebAppInstalls component of Google Chrome on Android , affecting versions prior to 152.0.7977.65 . The flaw allows a remote attacker leveraging social engineering to bypass the web origin policy by exploiting a co-installed app. Chromium rated the severit...

CVE-2026-44964

Summary: CVE-2026-44964 affects the Datadog Android app, where OnCallNotificationActivity is declared with android:exported="true" and no permission guard. This allows any co-installed app to launch the activity with attacker-controlled Intent extras (on_call_page_content, page_id, on_call_page_i...

CVE-2026-44964

In versions of the Datadog Android application prior to v545-5.9.2, OnCallNotificationActivity is declared exported with no permission guard. A co-installed application can launch it with attacker-controlled Intent extras, including a full-screen lock-screen message, an arbitrary on-call page ID,...