CVE-2026-18007

An inappropriate implementation in the Input component of Google Chrome on Android (prior to version 151.0.7922.72 ) allows a remote attacker to perform UI spoofing by navigating to a crafted HTML page. This vulnerability is categorized with a Low security severity by Chromium and has a CVSS3.1 s...

CVE-2026-13851

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: High...