CVE-2026-79008

CVE-2026-79008 is an improper input validation flaw in the Chromium GPU component of Google Chrome on Android prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can leverage a crafted HTML page to execute arbitrary code outside the sandbox . The CVSS v3.1 ...

CVE-2026-78936

Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...

CVE-2026-79042

CVE-2026-79042 is a missing authorization flaw in the Payments component of Google Chrome on Android prior to 152.0.7977.65 . A remote attacker leveraging social engineering can potentially bypass system access restrictions via a crafted HTML page, resulting in a low impact on integrity with no i...

CVE-2026-79042

Missing authorization in Payments in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79042

Missing authorization in Payments in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79213

An incorrect authorization vulnerability in the WebAppInstalls component of Google Chrome on Android (prior to version 152.0.7977.65 ) allowed a remote attacker to bypass system access restrictions by serving a crafted HTML page. The vulnerability was rated Medium by Chromium and scored CVSS 4.3 ...

CVE-2026-79057

Race condition in Start in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a co-installed app. Chromium security severity: Medium...

CVE-2026-79129

Use after free in Sessions in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: Medium...

EUVD-2026-65855

Use after free in Audio in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78937

Use after free in Search in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79256

Externally controlled reference in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79286

Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a co-installed app. Chromium security severity: Medium...

CVE-2026-79044

Missing authorization in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79117

Race condition in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a co-installed app. Chromium security severity: High...

CVE-2026-79117

CVE-2026-79117 is a race condition in the WebAppInstalls component of Google Chrome on Android , affecting versions prior to 152.0.7977.65 . A remote attacker leveraging social engineering and a co-installed app can bypass the web origin policy , potentially enabling unauthorized access to sensit...

CVE-2026-79282

Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

PT-2026-81801

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An out of bounds read occurs in the GPU component, which allows a remote attacker to read memory outside the sandbox by using a specially crafted HTML page. An out of bounds...

PT-2026-81697

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description A race condition in WebAppInstalls allows a remote attacker to bypass the web origin policy through a co-installed application. This exploitation requires the use of social...

PT-2026-81638

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description Missing authorization in WebAppInstalls allows a remote attacker who has compromised the renderer process to obtain sensitive information by using a crafted HTML page...

PT-2026-81709

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description A use after free issue exists in Sessions, which allows a remote attacker to execute arbitrary code outside the sandbox through UI interaction and social engineering. Use aft...