CVE-2026-78949

Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...

CVE-2026-78949

CVE-2026-78949 affects the CustomTabs component of Google Chrome on Android prior to 152.0.7977.65 . The root cause is an observable discrepancy in CustomTabs that allows a local attacker to obtain cross-origin data by exploiting a co-installed application. The impact is limited to unauthorized i...

CVE-2026-78949

Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...

CVE-2026-79146

An information leak in CustomTabs in Google Chrome for Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed application. The CVSS 3.1 score is 5.5 (Medium) with a local attack vector, no privileges required, user interaction required, and a high i...

CVE-2026-79146

Information leak in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...

CVE-2026-79146

Information leak in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...

CVE-2026-79180

CVE-2026-79180 is a UI misrepresentation vulnerability in the CustomTabs feature of Google Chrome on Android prior to version 152.0.7977.65 . A remote attacker can leverage social engineering by serving a crafted HTML page to spoof UI elements, potentially deceiving users into interacting with ma...

CVE-2026-79180

UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79180

UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79008

Improper input validation in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79008

Improper input validation in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79008

CVE-2026-79008 is an improper input validation flaw in the Chromium GPU component of Google Chrome on Android prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can leverage a crafted HTML page to execute arbitrary code outside the sandbox . The CVSS v3.1 ...

CVE-2026-78936

CVE-2026-78936 is an information disclosure flaw in CustomTabs within Google Chrome on Android prior to version 152.0.7977.65 . An observable discrepancy allows a local attacker , through a co-installed application , to obtain sensitive cross-origin data . The CVSS 3.1 score is 2.9 (Low) with an ...

CVE-2026-78936

Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...

CVE-2026-78936

Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...

CVE-2026-79241

Out of bounds read in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79241

Out of bounds read in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79241

CVE-2026-79241 is an out-of-bounds read in the GPU component of Google Chrome on Android , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit it by tricking a user into visiting a crafted HTML page, enabling memory reads outside the browser's security sandbox and potentiall...

CVE-2026-79132

CVE-2026-79132 is an improper input validation flaw in the Input component of Google Chrome on Android , affecting versions prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to escape the sandbox and execute arbitrary co...

CVE-2026-79132

Improper input validation in Input in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...