CVE-2026-10014

CVE-2026-10014 describes a use-after-free in WebMIDI within the Chromium-based Google Chrome browser on Android, prior to version 148.0.7778.216. The issue arises when a renderer process is compromised, potentially enabling a sandbox escape via a crafted HTML page. Affected component: WebMIDI (Ch...

CVE-2025-48543

In multiple locations, there is a possible way to escape chrome sandbox to attack android systemserver due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...