CVE-2026-78977

A flaw was found in Google Chrome. An uninitialized resource in the GPU component of Google Chrome on Android could allow a remote attacker to exploit this vulnerability. By crafting a malicious HTML page, the attacker could potentially read memory contents from within the sandbox environment,...

CVE-2026-79089

A flaw was found in Google Chrome's Transactions Platform on Android. A race condition vulnerability allows a remote attacker, through social engineering and a specially crafted HTML page, to bypass system access restrictions. This could lead to unauthorized access to sensitive system functions...

CVE-2026-79239

A flaw was found in Google Chrome on Android. A remote attacker could exploit an out-of-bounds read vulnerability in the Tint component by tricking a user into visiting a specially crafted HTML page. This could potentially allow the attacker to read sensitive memory within the browser's sandbox,...

CVE-2026-79241

A flaw was found in Google Chrome on Android. A remote attacker could exploit an out-of-bounds read vulnerability in the GPU component by tricking a user into visiting a specially crafted HTML page. This could allow the attacker to read sensitive memory outside of the browser's security sandbox,...

CVE-2026-78937

A flaw was found in Google Chrome on Android. This use-after-free vulnerability allows a remote attacker to potentially execute arbitrary code outside the sandbox. This can be achieved by leveraging social engineering to deliver a specially crafted HTML page to the victim. Successful exploitation...

CVE-2026-79046

A race condition flaw was found in the Permissions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=501437087...

CVE-2026-79044

A flaw was found in WebAppInstalls in Google Chrome on Android. A remote attacker, after compromising the renderer process, could exploit missing authorization by using a specially crafted HTML page. This could allow the attacker to obtain sensitive information...

CVE-2026-78936

A flaw was found in CustomTabs in Chromium, affecting Google Chrome on Android. A local attacker, through a co-installed application, could exploit an observable discrepancy to obtain sensitive cross-origin data. This vulnerability leads to information disclosure...

CVE-2026-79132

A flaw was found in Google Chrome on Android. This improper input validation vulnerability allows a remote attacker, who has already compromised the renderer process, to potentially execute arbitrary code outside of the browser's security sandbox. This exploitation occurs when the attacker provid...

CVE-2026-79117

A flaw was found in WebAppInstalls in Google Chrome on Android. A race condition vulnerability allows a remote attacker, by leveraging social engineering and a co-installed application, to bypass the web origin policy. This could lead to unauthorized access to sensitive information or actions...

CVE-2026-79086

A flaw was found in CustomTabs in Google Chrome on Android. This missing authorization vulnerability allows a local attacker, through a co-installed application, to obtain sensitive information. This could lead to the unauthorized disclosure of user data...

CVE-2026-79282

A flaw was found in ANGLE, a component of Google Chrome on Android. This 'use after free' vulnerability allows a remote attacker to execute arbitrary code outside the browser's security sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page. Successful exploitati...

CVE-2026-79286

A flaw was found in Chromium-browser. Missing authorization in CustomTabs on Android allows a local attacker to potentially execute arbitrary code outside the sandbox. This vulnerability can be exploited via a co-installed application, leading to a compromise of the system beyond its intended...

CVE-2026-79057

A flaw was found in Google Chrome on Android. A race condition in the 'Start' component could allow a local attacker to potentially execute arbitrary code outside of the application's security sandbox. This exploitation requires leveraging social engineering and a co-installed application...

CVE-2026-79222

An incorrect authorization flaw was found in the CustomTabs component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=496195129...

CVE-2026-79213

A flaw was found in WebAppInstalls in Google Chrome on Android. A remote attacker can exploit this incorrect authorization vulnerability by crafting a malicious HTML page. This allows the attacker to bypass system access restrictions, potentially leading to unauthorized actions on the device...

CVE-2026-79142

A flaw was found in ANGLE, a component used in Google Chrome on Android. This buffer overflow vulnerability allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. The exploitation occurs when a user visits a specially crafted HTML page, leading to a severe...

Beware of fake Indeed interview apps used to install spyware

From several independent reports, we’ve seen evidence of scammers using fake Android “interview” apps to target job seekers on the Indeed platform. Indeed is one of the world's largest employment websites, giving scammers access to a huge pool of potential victims, especially in a competitive job...

Android App "Myna Point" vulnerable to improper access restriction

Overview Android App "Myna Point" provided by Digital Agency contains the following vulnerability. Improper Authorization in Handler for Custom URL Scheme CWE-939 - CVE-2026-73335 RyotaK of GMO Flatt Security Inc. reported this vulnerability to the developer and IPA. JPCERT/CC coordinated with th...

CVE-2026-73335

Android application "Myna Point" is vulnerable to Improper Authorization in Handler for Custom URL Scheme CWE-939. A malicious application installed on the user's Android device may exploit the affected application's functionality through an Intent, potentially allowing arbitrary JavaScript to be...