Chromium: CVE-2026-84330 UI misrepresentation in FullScreen
UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. (Chromium security severity: Low)
Chromium CVE-2026-87624: UI misrepresentation in Passwords
Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
Race condition in Permissions in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
Race condition in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a co-installed app. (Chromium security severity: High)
Chromium: CVE-2026-78977 Uninitialized resource in GPU
Chromium: CVE-2026-79055 Information leak in Sharing
Incorrect reference resolution in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-19146 Uninitialized Use in GPU
Chromium: CVE-2026-17802 Side-channel information leakage in GPU
Chromium: CVE-2026-17767 Insufficient validation of untrusted input in WebView
Chromium: CVE-2026-17953 Insufficient policy enforcement in WebView
Chromium: CVE-2026-17808 Uninitialized Use in WebGL
Chromium: CVE-2026-17731 Inappropriate implementation in Autofill
Chromium: CVE-2026-17866 Type Confusion in Tab
Chromium: CVE-2026-17901 Inappropriate implementation in Sharing
Chromium: CVE-2026-17793 Inappropriate implementation in Messages
Chromium: CVE-2026-13282 Use after free in AdFilter
Chromium: CVE-2026-9929 Inappropriate implementation in WebGL
Chromium: CVE-2026-9917 Uninitialized Use in WebGL
Chromium: CVE-2026-9921 Uninitialized Use in WebGL
Chromium: CVE-2026-9912 Inappropriate implementation in GPU
Chromium: CVE-2026-9943 Out of bounds read in WebGL
Uninitialized Use in GPU in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)
Chromium: CVE-2026-13994 Inappropriate implementation in Credential Management
Chromium: CVE-2026-13866 Insufficient validation of untrusted input in Input
Chromium: CVE-2026-14129 Incorrect security UI in PreviewTab
Chromium: CVE-2026-14088 Uninitialized Use in Canvas