Google published CVE-2026-10934 on June 4, 2026, describing a high-severity use-after-free flaw in Chrome Autofill on Android before version 149.0.7827.53 that could let an attacker with renderer compromise attempt a sandbox escape through crafted HTML. That is a narrow sentence with a very...
Google assigned CVE-2026-11080 to a medium-severity use-after-free flaw in Android WebView, disclosed June 4, 2026, affecting Google Chrome on Android before version 149.0.7827.53 and potentially allowing remote heap corruption through a crafted HTML page. The vulnerability is not the loudest...