Clickjacking in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to spoof address bar via a co-installed app. (Chromium security severity: Medium)
Chromium: CVE-2026-17968 Uninitialized Use in WebXR
Information leak in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. (Chromium security severity: Medium)
UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low)
Chromium: CVE-2026-13929 Insufficient validation of untrusted input in DevTools
Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain sensitive information via a co-installed app. (Chromium security severity: Medium)
Chromium: CVE-2026-17747 Insufficient validation of untrusted input in Payments
Chromium: CVE-2026-84327 Incorrect authorization in Autofill
Chromium: CVE-2026-17737 Use after free in Bluetooth