chrome webview

CVE-2026-13037 is a high-severity Chromium vulnerability in Android WebView that turns a crafted HTML page into a potential route for arbitrary code execution inside the browser sandbox on unpatched devices. The flaw, classified as a use-after-free memory-safety bug, affects Google Chrome on...

CVE-2026-11295 is a newly published Google Chrome for Android WebView vulnerability, disclosed on June 4, 2026 and patched before version 149.0.7827.53, that could let a remote attacker escalate privileges if a user opened a crafted HTML page. The oddity is not that Chrome had another bug...