CVE-2025-11209

An inappropriate implementation in the Omnibox component of Google Chrome on Android (prior to version 141.0.7390.54) allows a remote attacker to spoof the contents of the URL bar via a crafted HTML page. While some documents suggest memory issues like buffer overflows in other components, this s...