CVE-2026-14088

Uninitialized Use in Canvas in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14080

Insufficient validation of untrusted input in TabSwitcher in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via malicious network traffic. Chromium security severity: Low...

CVE-2026-14080

Insufficient validation of untrusted input in TabSwitcher in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via malicious network traffic. Chromium security severity: Low...

CVE-2026-14080

An insufficient validation of untrusted input flaw was discovered in the TabSwitcher component of the Chromium browser (affecting Google Chrome on Android prior to version 150.0.7871.47). This vulnerability could allow a remote attacker to bypass navigation restrictions via malicious network traf...

CVE-2026-14046

Inappropriate implementation in CustomTabs in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14034

An inappropriate implementation flaw in the WebXR component of the Chromium browser (affected on Android prior to version 150.0.7871.47 ) allows a remote attacker to bypass navigation restrictions via a crafted HTML page. The root cause is identified as an Improper Access Control (CWE-284) issue....

CVE-2026-14034

Inappropriate implementation in WebXR in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14008

Uninitialized Use in WebXR in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-14008

Uninitialized Use in WebXR in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-14008

A Use of Uninitialized Variable vulnerability exists in the WebXR component of the Chromium browser (specifically affecting Google Chrome on Android prior to version 150.0.7871.47 ). A remote attacker could exploit this flaw by using a crafted HTML page to obtain potentially sensitive information...

CVE-2026-14005

Use after free in Omnibox in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-14005

Use after free in Omnibox in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-14005

Use after free in Omnibox in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-14005

A use after free flaw exists in the Omnibox component of the Chromium browser (affecting Google Chrome on Android prior to version 150.0.7871.47 ). A remote attacker could exploit this via a crafted HTML page to potentially trigger heap corruption if they can convince a user to perform specific U...

CVE-2026-13997

An incorrect security UI flaw exists in the Extensions component of the Chromium browser. A remote attacker could perform UI spoofing via a crafted HTML page by convincing a user to engage in specific UI gestures. This issue affects versions prior to 150.0.7871.47 on Android. Exploitation details...

CVE-2026-13994

Inappropriate implementation in Credential Management in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13994

Inappropriate implementation in Credential Management in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13995

Insufficient validation of untrusted input in Autofill in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13987

Incorrect security UI in Mobile in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13987

An incorrect security UI flaw was discovered in the Mobile component of the Chromium browser (affecting Google Chrome on Android prior to version 150.0.7871.47 ). A remote attacker could exploit this by using a crafted HTML page to perform UI spoofing . This vulnerability is categorized with a Me...