PT-2026-88588

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 153.0.8010.36 Description A use after free issue exists in WebGL, which allows a remote attacker to execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page. Use...

PT-2026-88697

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 153.0.8010.36 Description A UI misrepresentation in CustomTabs allows a remote attacker to spoof the address bar through a co-installed application. Recommendations Update Google Chrome on Android to...

PT-2026-88700

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 153.0.8010.36 Description Improper input validation in the Safebrowsing component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to...

PT-2026-88665

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 153.0.8010.36 Description An information leak exists in the Passwords component that allows a remote attacker to leak sensitive information by using a crafted HTML page. Recommendations Update Google...

PT-2026-88676

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 153.0.8010.36 Description An uninitialized resource in the GPU allows a remote attacker who has compromised the renderer process to read memory outside the sandbox by using a crafted HTML page...

PT-2026-88622

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 153.0.8010.36 Description Missing authorization in the WebView component allows a remote attacker to potentially bypass system access restrictions through crafted network traffic, provided they can...

PT-2026-88634

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 153.0.8010.36 Description Missing authorization in the WebView component allows a remote attacker to bypass system access restrictions through the use of crafted network traffic and social engineering...

PT-2026-88538

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 153.0.8010.36 Description An out-of-bounds write occurs in WebGL, which allows a remote attacker to execute arbitrary code outside the sandbox by using a specially crafted HTML page. An out-of-bounds...

PT-2026-88655

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 153.0.8010.36 Description An uninitialized resource in the GPU allows a remote attacker to read memory outside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome on Android...

PT-2026-88620

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 153.0.8010.36 Description A use after free issue exists in Dawn, which could allow a remote attacker to execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page. Us...

PT-2026-88743

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 153.0.8010.36 Description An integer overflow exists in the GPU component. This flaw allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing the user to visit a...

PT-2026-88724

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 153.0.8010.36 Description UI misrepresentation in the Passwords component allows a remote attacker who has compromised the renderer process to spoof UI elements using a crafted HTML page...

PT-2026-88740

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 153.0.8010.36 Description An out of bounds read exists in the WebView component. This allows a remote attacker who has already compromised the renderer process to read memory outside the sandbox by...

CVE-2026-21112: Improper Input Validation

Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege. User interaction is required for triggering this vulnerability...

CVE-2026-21109: Improper Access Control

Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive information...

CVE-2026-87643: Integer Overflow or Wraparound

Integer overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87640: Out-of-bounds Read

Out of bounds read in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87624: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87597: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. Chromium security severity: Low...

CVE-2026-87583: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...