CVE-2026-103922 Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path

Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim who activates an untrusted link to navigate a frame ...

CVE-2026-103922 Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path

Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim who activates an untrusted link to navigate a frame ...

CVE-2026-103922 Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path

Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim who activates an untrusted link to navigate a frame ...

CLEANSTART-2024-VW81422 Incorrect security UI in TabStrip and Navigation in Google Chrome on Android prior to 89

Security vulnerability affects the chromium package. Incorrect security UI in TabStrip and Navigation in Google Chrome on Android prior to 89...

CLEANSTART-2024-JL25216 Incorrect security UI in payments in Google Chrome on Android prior to 91

Security vulnerability affects the chromium package. Incorrect security UI in payments in Google Chrome on Android prior to 91...

CLEANSTART-2024-RR50251 Use after free in WebAuthentication in Google Chrome on Android prior to 91

Security vulnerability affects the chromium package. Use after free in WebAuthentication in Google Chrome on Android prior to 91...

CLEANSTART-2024-XE83079 Heap buffer overflow in Autofill in Google Chrome on Android prior to 91

Security vulnerability affects the chromium package. Heap buffer overflow in Autofill in Google Chrome on Android prior to 91...

CLEANSTART-2024-DD50354 Incorrect security UI in Downloads in Google Chrome on Android prior to 92

Security vulnerability affects the chromium package. Incorrect security UI in Downloads in Google Chrome on Android prior to 92...

CLEANSTART-2024-GV44456 Insufficient policy enforcement in Android intents in Google Chrome prior to 92

Security vulnerability affects the chromium package. Insufficient policy enforcement in Android intents in Google Chrome prior to 92...

CLEANSTART-2024-OX53318 Incorrect security UI in Navigation in Google Chrome on Android prior to 92

Security vulnerability affects the chromium package. Incorrect security UI in Navigation in Google Chrome on Android prior to 92...

CLEANSTART-2024-PW15902 Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 98

Security vulnerability affects the chromium package. Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 98...

CLEANSTART-2024-DG80618 Incorrect security UI in Downloads in Google Chrome on Android prior to 101

Security vulnerability affects the chromium package. Incorrect security UI in Downloads in Google Chrome on Android prior to 101...

CLEANSTART-2024-WS76335 Insufficient validation of untrusted input in File in Google Chrome on Android prior to 103

Security vulnerability affects the chromium package. Insufficient validation of untrusted input in File in Google Chrome on Android prior to 103...

CLEANSTART-2024-NV58280 logic error in the room key sharing functionality of Element Android before 1

Security vulnerability affects the element-web package. A logic error in the room key sharing functionality of Element Android before 1...

Linux Distros Unpatched Vulnerability : CVE-2025-26416

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In initializeSwizzler of SkBmpStandardCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of...

Linux Distros Unpatched Vulnerability : CVE-2026-102331

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandb...

Linux Distros Unpatched Vulnerability : CVE-2026-100823

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 157. CVE-2026-100823 Note that Nessus relies on the...

CVE-2026-102670: Cleartext Transmission of Sensitive Information

Joyland AI app explicitly permits cleartext HTTP traffic on Android 9+ where the default is to block it...

PT-2026-103985

Joyland AI app explicitly permits cleartext HTTP traffic on Android 9+ where the default is to block it...

CVE-2026-103922: Origin Validation Error

Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim who activates an untrusted link to navigate a frame ...