PT-2026-81801

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An out of bounds read occurs in the GPU component, which allows a remote attacker to read memory outside the sandbox by using a specially crafted HTML page. An out of bounds...

PT-2026-81816

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An externally controlled reference in the WebView component allows a remote attacker who has already compromised the renderer process to potentially execute arbitrary code...

PT-2026-81842

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description Improper input validation in the Autofill feature allows a remote attacker to obtain sensitive information by using a crafted HTML page. Recommendations Update Google Chrome ...

PT-2026-81561

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An observable discrepancy in CustomTabs allows a local attacker to obtain cross-origin data through a co-installed application. Cross-origin data refers to information...

PT-2026-81640

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description A race condition in the permissions system allows a remote attacker to bypass the web origin policy. This is achieved by leveraging social engineering and directing the user ...

Towards LLM-Enhanced Android Taint Analysis

Taint analysis is a fundamental technique for detecting sensitive data leaks in Android apps. However, traditional static tools, such as FlowDroid, still face well-known challenges due to the complexity of accurately modeling the Android framework. In this paper, we investigate whether...

CVE-2026-79256: Externally Controlled Reference to a Resource in Another Sphere

Externally controlled reference in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79222: Incorrect Authorization

Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to bypass web origin policy via a co-installed app. Chromium security severity: Medium...

CVE-2026-79213: Incorrect Authorization

Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79008: Improper Input Validation

Improper input validation in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78949: Observable Discrepancy

Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...

CVE-2026-79282: Use After Free

Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79055: Exposure of Sensitive Information to an Unauthorized Actor

Information leak in Sharing in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-installed app. Chromium security severity: Low...

CVE-2026-79142: Heap-based Buffer Overflow

Buffer overflow in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79129: Use After Free

Use after free in Sessions in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: Medium...

CVE-2026-79210: Use After Free

Use after free in Audio in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79057: Time-of-check Time-of-use (TOCTOU) Race Condition

Race condition in Start in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a co-installed app. Chromium security severity: Medium...

CVE-2026-79146: Exposure of Sensitive Information to an Unauthorized Actor

Information leak in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...

PT-2026-81793

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description UI misrepresentation in CustomTabs allows a remote attacker to spoof the address bar by using a crafted HTML page. Recommendations Update Google Chrome on Android to version...

PT-2026-81799

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An out of bounds read exists in Tint, which allows a remote attacker to potentially read memory inside the sandbox by using a crafted HTML page. An out of bounds read occurs...