CVE-2026-11145: Concurrent Execution using Shared Resource with Improper Synchronization

Race in Geolocation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

PT-2026-46797

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 149.0.7827.53 Description An inappropriate implementation in the user interface allows a remote attacker to leak cross-origin data, which is information from a different origin than the one that...

CVE-2026-11148: Cross-Site Request Forgery (CSRF)

Inappropriate implementation in Payments in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11034: Improper Input Validation

Insufficient validation of untrusted input in Tab Group Sync in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via malicious network traffic. Chromium security severity: Medium...

PT-2026-46635

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 149.0.7827.53 Description An inappropriate implementation in the Near Field Communication NFC component allows a remote attacker to perform privilege escalation through the use of a crafted HTML page...

PT-2026-46805

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 149.0.7827.53 Description An inappropriate implementation in CustomTabs allows a local attacker to leak cross-origin data through the use of a crafted HTML page. Recommendations Update to version...

CVE-2026-10929: Heap-based Buffer Overflow

Heap buffer overflow in ANGLE in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-10929: Heap-based Buffer Overflow

Heap buffer overflow in ANGLE in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

PT-2026-46814

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 149.0.7827.53 Description Insufficient policy enforcement in Navigation allows a remote attacker who has compromised the renderer process to bypass navigation restrictions using a crafted HTML page...

PT-2026-46658

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 149.0.7827.53 Description A use after free issue exists in the Autofill component. A remote attacker who has already compromised the renderer process can potentially achieve a sandbox escape by using ...

PT-2026-46675

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 149.0.7827.53 Description An inappropriate implementation in Payments allows a local attacker to leak cross-origin data, which is data from a different origin than the one that initiated the request, ...

PT-2026-46610

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 149.0.7827.53 Description A race condition in the GPU component allows a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape. This is achieved...

KeyChainActivity Privilege Escalation

The vulnerability of the KeyChainActivity component in Android operating systems is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Android Shared.java getCallingPackageName Privilege Escalation

The vulnerability of the getCallingPackageName method in the Shared.java class of Android operating systems is related to the possibility of bypassing access control mechanisms. Exploiting this vulnerability can allow attackers to enhance their privileges...

Android HostEmulationManager onNullBinding Heap Buffer Overflow

The vulnerability of the onServiceConnected method in Android operating systems arises due to a race condition. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Android applySimpleFieldMaxSize Heap Buffer Overflow DoS

The vulnerability of the applySimpleFieldMaxSize method in the DataRowHandler.java class of Android operating systems is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures...

Framework Component Privilege Escalation

The vulnerability of the Framework component in Android operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

ForgetDeviceDialogFragment Java Privilege Escalation

The vulnerability of the getAppLabel method in the ForgetDeviceDialogFragment.java class of Android operating systems is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Android HostEmulationManager onNullBinding Heap Buffer Overflow

The vulnerability of the onNullBinding method in the HostEmulationManager.java class in Android operating systems is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to enhance their privileges...

Android KeyguardViewMediator Disclosure

The vulnerability in the KeyguardViewMediator.java class of Android operating systems is related to incorrect code generation management. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by the system’s security measures...