UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. (Chromium security severity: Low)
Chromium CVE-2026-87624: UI misrepresentation in Passwords
Incorrect reference resolution in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-19146 Uninitialized Use in GPU
Race condition in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a co-installed app. (Chromium security severity: High)
Chromium: CVE-2026-12469 Uninitialized Use in GPU
Chromium: CVE-2026-17866 Type Confusion in Tab
Chromium: CVE-2026-13282 Use after free in AdFilter
Chromium: CVE-2026-17953 Insufficient policy enforcement in WebView
Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
Chromium: CVE-2026-84330 UI misrepresentation in FullScreen
Chromium: CVE-2026-17808 Uninitialized Use in WebGL
Chromium: CVE-2026-78977 Uninitialized resource in GPU
Chromium: CVE-2026-17802 Side-channel information leakage in GPU
Chromium: CVE-2026-13997 Incorrect security UI in Extensions
Chromium: CVE-2026-13994 Inappropriate implementation in Credential Management
Chromium: CVE-2026-14129 Incorrect security UI in PreviewTab
Chromium: CVE-2026-17793 Inappropriate implementation in Messages
Uninitialized Use in GPU in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)
Chromium: CVE-2026-13964 Insufficient policy enforcement in WebView
Chromium: CVE-2026-13954 Insufficient policy enforcement in XML
Chromium: CVE-2026-13932 Inappropriate implementation in Sharing
Chromium: CVE-2026-14088 Uninitialized Use in Canvas
Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
Chromium: CVE-2026-17767 Insufficient validation of untrusted input in WebView
Chromium: CVE-2026-9943 Out of bounds read in WebGL
Chromium: CVE-2026-9929 Inappropriate implementation in WebGL
Race condition in Permissions in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
Chromium: CVE-2026-9921 Uninitialized Use in WebGL
Chromium: CVE-2026-9917 Uninitialized Use in WebGL