CVE-2026-106715

NewsBreak for Android version 26.21.0 is vulnerable to information disclosure because its WebView JavaScript bridge incorrectly treats data:text/html; URLs as trusted origins. An attacker can exploit this by tricking a user into opening a crafted deep link via the newsbreak://openweb scheme. Once...