CVE-2026-71391

GNU Emacs for Android is affected by an off-by-one in the gvar table parser (src/sfnt.c). The shared-coordinate index boundary check in sfnt_vary_simple_glyph() and sfnt_vary_compound_glyph() uses a > comparison instead of >=, allowing a crafted TrueType variable font to bypass the check an...

CVE-2026-18809

Information disclosure in Firefox for Android and Firefox Focus for Android. This vulnerability was fixed in Firefox 153.0.3...

UBUNTU-CVE-2026-18809

Information disclosure in Firefox for Android and Firefox Focus for Android. This vulnerability was fixed in Firefox 153.0.3...

CVE-2026-18809

Information disclosure in Firefox for Android and Firefox Focus for Android. This vulnerability was fixed in Firefox 153.0.3...

CVE-2026-18809

Information disclosure in Firefox for Android and Firefox Focus for Android. This vulnerability was fixed in Firefox 153.0.3...

EUVD-2026-52529

External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network...

CVE-2026-66310

External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally...

Security Vulnerabilities fixed in Firefox for Android 153.0.3 — Mozilla

CVE-2026-18809: Information disclosure in Firefox for Android and Firefox Focus for Android Reporter The Mozilla Fuzzing Team Impact high References Bug 2055683...

CVE-2026-65802

CVE-2026-65802 affects Microsoft Edge for Android. The vulnerability is described as external control of a file name or path that enables an unauthorized attacker to disclose information over a network. It is network‑accessible with low attack complexity, no privileges required, but user interact...

CVE-2026-65802 Microsoft Edge for Android Information Disclosure Vulnerability

...

CVE-2026-66310 Microsoft Edge for Android Information Disclosure Vulnerability

...

Microsoft Edge for Android Information Disclosure Vulnerability

External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network...

SUSE CVE-2026-17904

Insufficient policy enforcement in NFC in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

SUSE CVE-2026-17915

Inappropriate implementation in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17964

Incorrect security UI in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17938

Inappropriate implementation in FullScreen in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

DEBIAN-CVE-2026-17915

Inappropriate implementation in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

DEBIAN-CVE-2026-17651

Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-17984

CVE-2026-17984 affects Google Chrome on Android (before 151.0.7922.72). The issue is an inappropriate implementation that allows a local attacker to leak cross-origin data via a crafted HTML page. CVSS shows Low impact (C/L, I/N, A/N) with local access and user interaction required. Remediation i...

EUVD-2026-50674

Inappropriate implementation in Cast in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...