You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
custom tabs
About this tag
The custom tabs tag on WindowsForum.com covers discussions about Chrome Custom Tabs on Android, a feature that allows apps to display web content in a customized browser tab without leaving the app. Recent content highlights a security vulnerability, CVE-2026-11278, affecting Chrome on Android versions before 149.0.7827.53, which involved an origin-validation flaw in Custom Tabs that could leak cross-origin data. This tag explores how Custom Tabs function as a critical infrastructure component for mobile apps, handling identity flows, payments, and sign-ins, and the security implications of this integration. Topics include patching strategies for IT teams and the broader role of browsers as mobile OS components.
Google Chrome on Android versions before 149.0.7827.53 contained CVE-2026-11278, a Custom Tabs origin-validation flaw disclosed on June 4, 2026, that could let a local attacker leak cross-origin data through a crafted HTML page. That is the plain fact; the more interesting story is what the bug...