chrome for android

  1. CVE-2026-11035: Chrome Android Custom Tabs XML Privilege Escalation Fix (149.0.7827.53)

    CVE-2026-11035 is a Google Chrome for Android Custom Tabs vulnerability, published on June 4, 2026 and fixed before version 149.0.7827.53, that allowed a local attacker to escalate privileges through a crafted XML file when user interaction was involved. The bug is not the scariest item in...
  2. CVE-2026-10923 Chrome Android Use-After-Free: Fixing Web App Install Risk

    CVE-2026-10923 is a high-severity Google Chrome for Android vulnerability published by NVD on June 4, 2026, affecting Chrome versions before 149.0.7827.53 and describing a WebAppInstalls use-after-free flaw that could allow arbitrary code execution through a malicious file. The short version is...
  3. CVE-2026-11287 Chrome for Android: NVD CPE Gap, Version 149.0.7827.53

    NVD’s June 8, 2026 enrichment for CVE-2026-11287 lists Google Chrome versions before 149.0.7827.53 combined with Android as the vulnerable configuration, but the record still appears incomplete because it does not expose a distinct Android Chrome package CPE. That is the small but important...