1566 matches found
CVE-2026-14088
Uninitialized Use in Canvas in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...
CVE-2026-14080
An insufficient validation of untrusted input flaw was discovered in the TabSwitcher component of the Chromium browser (affecting Google Chrome on Android prior to version 150.0.7871.47). This vulnerability could allow a remote attacker to bypass navigation restrictions via malicious network traf...
CVE-2026-14080
Insufficient validation of untrusted input in TabSwitcher in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via malicious network traffic. Chromium security severity: Low...
CVE-2026-14080
Insufficient validation of untrusted input in TabSwitcher in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via malicious network traffic. Chromium security severity: Low...
CVE-2026-14046
Inappropriate implementation in CustomTabs in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-14034
An inappropriate implementation flaw in the WebXR component of the Chromium browser (affected on Android prior to version 150.0.7871.47 ) allows a remote attacker to bypass navigation restrictions via a crafted HTML page. The root cause is identified as an Improper Access Control (CWE-284) issue....
CVE-2026-14034
Inappropriate implementation in WebXR in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...
CVE-2026-14008
A Use of Uninitialized Variable vulnerability exists in the WebXR component of the Chromium browser (specifically affecting Google Chrome on Android prior to version 150.0.7871.47 ). A remote attacker could exploit this flaw by using a crafted HTML page to obtain potentially sensitive information...
CVE-2026-14008
Uninitialized Use in WebXR in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-14008
Uninitialized Use in WebXR in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-14005
A use after free flaw exists in the Omnibox component of the Chromium browser (affecting Google Chrome on Android prior to version 150.0.7871.47 ). A remote attacker could exploit this via a crafted HTML page to potentially trigger heap corruption if they can convince a user to perform specific U...
CVE-2026-14005
Use after free in Omnibox in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-14005
Use after free in Omnibox in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-14005
Use after free in Omnibox in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-13997
An incorrect security UI flaw exists in the Extensions component of the Chromium browser. A remote attacker could perform UI spoofing via a crafted HTML page by convincing a user to engage in specific UI gestures. This issue affects versions prior to 150.0.7871.47 on Android. Exploitation details...
CVE-2026-13994
Inappropriate implementation in Credential Management in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-13994
Inappropriate implementation in Credential Management in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-13995
Insufficient validation of untrusted input in Autofill in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-13987
An incorrect security UI flaw was discovered in the Mobile component of the Chromium browser (affecting Google Chrome on Android prior to version 150.0.7871.47 ). A remote attacker could exploit this by using a crafted HTML page to perform UI spoofing . This vulnerability is categorized with a Me...