CVE-2026-13929

Insufficient policy enforcement in DevTools in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to bypass navigation restrictions via a malicious file. Chromium security severity: Medium...

CVE-2026-13927

The Chromium browser (including Google Chrome on Android and Microsoft Edge ) is vulnerable to a privilege escalation flaw due to insufficient validation of untrusted input in the UI component . A local attacker can exploit this by providing a malicious file . Remediation is available in updated ...

CVE-2026-13927

Insufficient validation of untrusted input in UI in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to perform privilege escalation via a malicious file. Chromium security severity: Medium...

CVE-2026-13923

A vulnerability was identified in the GPU component of the Chromium browser (affecting Google Chrome on Android prior to version 150.0.7871.47) due to an uninitialized use flaw. A remote attacker could exploit this by navigating to a crafted HTML page to obtain potentially sensitive information f...

CVE-2026-13923

Uninitialized Use in GPU in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13923

Uninitialized Use in GPU in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13910

A vulnerability in the WebXR component of the Chromium browser allows a remote attacker to leak cross-origin data via a crafted HTML page. This issue is caused by insufficient policy enforcement and affects Google Chrome on Android versions prior to 150.0.7871.47 . Impact includes potential data ...

CVE-2026-13910

Insufficient policy enforcement in WebXR in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13910

Insufficient policy enforcement in WebXR in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13910

Insufficient policy enforcement in WebXR in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13887

Inappropriate implementation in NFC in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13885

A use after free vulnerability exists in the Skia component of Google Chrome on Android prior to version 150.0.7871.47 . A remote attacker can exploit this flaw by using a crafted HTML page to execute arbitrary code inside a sandbox. While the documents do not specify a direct remediation for Chr...

CVE-2026-13885

Use after free in Skia in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13885

Use after free in Skia in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13872

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to potentially perform a sandbox escape via a malicious file. Chromium security severity: Medium...

CVE-2026-13872

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to potentially perform a sandbox escape via a malicious file. Chromium security severity: Medium...

CVE-2026-13872

A vulnerability in the WebAppInstalls component of the Chromium browser (affecting Google Chrome on Android prior to version 150.0.7871.47) allows a local attacker to perform a sandbox escape via a malicious file. The root cause is the insufficient validation of untrusted input . While no specifi...

CVE-2026-13868

A vulnerability exists in the Network component of the Chromium browser, affecting Google Chrome on Android prior to version 150.0.7871.47 . An inappropriate implementation allowed a remote attacker who had already compromised the renderer process to bypass site isolation by using a crafted HTML ...

CVE-2026-13868

Inappropriate implementation in Network in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13868

Inappropriate implementation in Network in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...