CVE-2026-11175

Google Chrome on Android versions prior to 149.0.7827.53 is affected by CVE-2026-11175 , where an incorrect security UI in Messages allows a remote attacker to perform UI spoofing via a crafted HTML page . This vulnerability has a Medium security severity in Chromium. While specific exploit links...

CVE-2026-11175

Incorrect security UI in Messages in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11172

Incorrect security UI in Contact Picker in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11172

Google Chrome on Android prior to version 149.0.7827.53 is vulnerable to a security UI flaw in the Contact Picker component. A remote attacker could exploit this via a crafted HTML page to perform UI spoofing . The vulnerability is categorized as Medium severity by Chromium and High severity by C...

CVE-2026-11172

Incorrect security UI in Contact Picker in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11167

Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11167

Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11163

Use after free in Messages in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11148

Inappropriate implementation in Payments in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11148

Inappropriate implementation in Payments in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11148

In Google Chrome on Android prior to version 149.0.7827.53 , an inappropriate implementation in the Payments component allows a local attacker to leak cross-origin data through a crafted HTML page. This vulnerability is associated with CWE-352 (Cross-Site Request Forgery) and has a Medium securit...

CVE-2026-11145

Race in Geolocation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11145

A race condition in the Geolocation component of Google Chrome on Android (prior to version 149.0.7827.53) allows a remote attacker to leak cross-origin data through a crafted HTML page. This vulnerability is rated as Medium severity by Chromium. While exploitation details are not provided in the...

CVE-2026-11131

Use after free in Autofill in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11127

Inappropriate implementation in WebAPKs in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform domain spoofing via a crafted WebAPK. Chromium security severity: Medium...

CVE-2026-11127

An inappropriate implementation in WebAPKs within Google Chrome on Android (prior to version 149.0.7827.53 ) allows a remote attacker to perform domain spoofing via a crafted WebAPK. This vulnerability is categorized with a Medium security severity and is associated with CWE-358 (Improperly Imple...

CVE-2026-11119

An inappropriate implementation in the GPU component of Google Chrome on Android prior to version 149.0.7827.53 allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The vulnerability is classified with a Medium security...

CVE-2026-11119

Inappropriate implementation in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11119

Inappropriate implementation in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11108

Inappropriate implementation in NFC in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...