EUVD-2026-65897

Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79086

A missing authorization vulnerability in CustomTabs within Google Chrome on Android (prior to version 152.0.7977.65) allows a local attacker to obtain sensitive information via a co-installed app. The issue is categorized as a medium security severity. While specific exploit details are not provi...

EUVD-2026-65890

Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain sensitive information via a co-installed app. Chromium security severity: Medium...

CVE-2026-79057

Race condition in Start in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a co-installed app. Chromium security severity: Medium...

CVE-2026-79046

Race condition in Permissions in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78937

A Use after free vulnerability exists in the Search component of Google Chrome on Android prior to version 152.0.7977.65 . A remote attacker could exploit this by leveraging social engineering to navigate to a crafted HTML page , potentially leading to arbitrary code execution outside the sandbox...

CVE-2026-79046

Race condition in Permissions in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79256

A vulnerability in the WebView component of Google Chrome on Android (prior to version 152.0.7977.65) was caused by an externally controlled reference . This flaw allowed a remote attacker, having already compromised the renderer process, to potentially execute arbitrary code outside the sandbox ...

CVE-2026-79256

Externally controlled reference in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79286

A missing authorization vulnerability in CustomTabs within Google Chrome on Android (prior to version 152.0.7977.65 ) allows a local attacker to potentially execute arbitrary code outside the sandbox via a co-installed app. The vulnerability impacts the Chromium component. For Debian 12 bookworm ...

CVE-2026-79044

Google Chrome on Android versions prior to 152.0.7977.65 is vulnerable to an authorization bypass within the WebAppInstalls component. A remote attacker who has compromised the renderer process can exploit this flaw by serving a crafted HTML page to obtain sensitive information. For Debian 12 boo...

CVE-2026-79117

Race condition in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a co-installed app. Chromium security severity: High...

CVE-2026-79142

Buffer overflow in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79142

Buffer overflow in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79282

Google Chrome contains a use-after-free vulnerability in the ANGLE (Almost Native Graphics Layer Engine) component, affecting versions on Android prior to 152.0.7977.65 . This flaw allows a remote attacker to execute arbitrary code outside the browser sandbox by navigating to a crafted HTML page....

PT-2026-81548

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An observable discrepancy in CustomTabs allows a local attacker to obtain cross-origin data through a co-installed application. Cross-origin data refers to information...

PT-2026-81782

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description Incorrect authorization in CustomTabs allows a local attacker to bypass the web origin policy through a co-installed application. The web origin policy is a security mechanis...

PT-2026-81832

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An incorrect reference resolution in the WebView component allows a remote attacker to potentially bypass the web origin policy, which is a security mechanism that restricts...

PT-2026-81584

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An uninitialized resource in the GPU allows a remote attacker to potentially read memory inside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome...

PT-2026-81636

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description Missing authorization in the Payments component allows a remote attacker to potentially bypass system access restrictions. This is achieved by leveraging social engineering a...