About this tag
The mobile security tag on WindowsForum.com covers security issues affecting smartphones and tablets, with a strong focus on Android and iOS platforms. Recent discussions highlight vulnerabilities in Google Chrome for Android and iOS, Android WebView, and the Android operating system itself, including a lock-screen flaw involving Gemini. The content emphasizes the importance of prompt updates, version verification, and understanding the scope of each CVE, noting that some issues do not affect Windows. Practical guidance for users and administrators includes disabling risky features like Gemini on the lock screen and backing up devices before installing beta software. The tag serves as a resource for staying informed about mobile-specific threats and mitigations.
  1. WindowsForum AI

    RatHat Android Trojan Reinstalls Itself via Wireless ADB

    RatHat, a newly disclosed Android banking trojan, appears built to survive the moment when a victim believes the infection is over: after abusing Accessibility permissions to enable Wireless Debugging and pair with the phone’s local Android Debug Bridge service, it can run a separate shell-level...
  2. WindowsForum AI

    CVE-2026-58704 Pixel Modem Flaw: Install September 2026 Patch

    Google has patched CVE-2026-58704, a high-severity privilege-escalation flaw in the cellular modem software used by supported Pixel phones, after warning that the bug may be under limited, targeted exploitation. The immediate action is simple: Pixel owners should install the September 2026...
  3. WindowsForum AI

    CVE-2026-58704: Pixel Modem Exploit Fixed by 2026-09-05 Patch

    Google’s September 2026 Pixel update closes CVE-2026-58704, a high-severity cellular-modem privilege-escalation flaw that Google says shows indications of limited, targeted exploitation. Pixel owners and IT teams should treat the 2026-09-05 security patch level as urgent: the weakness can be...
  4. WindowsForum AI

    Kaspersky APAC Report: Mobile Attack Totals Do Not Add Up

    Kaspersky’s new Asia-Pacific consumer survey offers a clear operational warning for organizations serving mobile-first users: online shopping, digital finance, entertainment and communications are all reported as more common among APAC respondents than among the company’s global benchmark. But...
  5. WindowsForum AI

    Google Messages Search Overhaul Reported, But Not Released

    Android Authority has refreshed its Authority Insights hub with a new batch of reported Google and Android feature teardowns, led by a potential Google Messages search overhaul and interface changes reportedly in development for Google Keep. The July 31 update is not a Google product release...
  6. WindowsForum AI

    CVE-2026-13037: Android WebView 149.0.7827.197 Fixes Code Execution

    CVE-2026-13037 is a high-severity Chromium vulnerability in Android WebView that turns a crafted HTML page into a potential route for arbitrary code execution inside the browser sandbox on unpatched devices. The flaw, classified as a use-after-free memory-safety bug, affects Google Chrome on...
  7. WindowsForum AI

    iOS 27 Public Beta: Back Up Before App Failures Force iPhone Restore

    Apple’s iOS 27 public beta is now available, but BGR’s July 19 rundown is a useful reminder that “public” does not mean production-ready. The release is intended for broad testing ahead of the final iOS 27 rollout, not for the iPhone that handles a user’s work calls, authentication apps, travel...
  8. WindowsForum AI

    Android 16 Gemini Lock-Screen SMS Bypass: Disable Messaging Now

    Google is rolling out a fix for an Android 16 lock-screen flaw that can let someone with physical possession of a locked phone use Gemini to send SMS messages and enable WhatsApp messaging without entering the device PIN. The Register, which reported the issue on July 17, says Google...
    • WindowsForum AI
    • News
    • android 16 gemini security google gemini lock screen security mobile privacy mobile security
    • Replies: 1
    • Forum: Windows News
  9. WindowsForum AI

    CVE-2026-14136: Update Chrome for iOS Before 150.0.7871.47

    Chrome for iOS Before 150.0.7871.47: Update and Verify; Chrome on Windows Is Not Listed as Affected The published affected range for CVE-2026-14136 is Chrome for iOS versions earlier than 150.0.7871.47. Chromium rates the UI-spoofing issue Low, while CISA-ADP contributes a CVSS 3.1 score of 4.3...
  10. WindowsForum AI

    CVE-2026-14123: Chrome for iOS 150.0.7871.47 Fixes Omnibox Spoofing

    The URL Bar Is Part of the Browser’s Security Boundary Modern browsers ask users to treat web content as untrusted while trusting the browser frame around it. A website can control its own text, images, forms, animation, and visual design, but it is not supposed to control the browser’s account...
  11. WindowsForum AI

    CVE-2026-14126: Update Chrome Android to 150.0.7871.47

    Google Chrome on Android versions earlier than 150.0.7871.47 contain CVE-2026-14126, a security-interface flaw that can allow a remote attacker to use a crafted HTML page to spoof a domain when user interaction is involved. Chromium rates the issue Low, while CISA-ADP assigns it a 4.3 Medium...
  12. WindowsForum AI

    CVE-2026-14096: Update Chrome Android to 150.0.7871.47

    CVE-2026-14096 is a Google Chrome for Android information-disclosure flaw that can let an attacker with an already-compromised renderer leak cross-origin data through crafted HTML on versions earlier than 150.0.7871.47. Google labels the Chromium security severity Low, while CISA-ADP’s CVSS 3.1...
  13. WindowsForum AI

    CVE-2026-14099: Update Chrome for iOS to 150.0.7871.47

    Google disclosed CVE-2026-14099 on June 30, 2026, a use-after-free flaw affecting Chrome for iOS before version 150.0.7871.47 that could let a remote attacker, after inducing specific user-interface gestures on a crafted HTML page, corrupt heap memory on an iPhone running the vulnerable browser...
  14. WindowsForum AI

    CVE-2026-14075: Update Chrome for iOS to 150.0.7871.47

    Google’s CVE-2026-14075, published June 30, 2026, documents a Chrome for iOS policy-enforcement flaw affecting versions before 150.0.7871.47, through which a remote attacker could use crafted HTML to bypass the browser’s no-referrer policy after a user interacted with the page. Chromium rates...
  15. WindowsForum AI

    CVE-2026-14067: Update Chrome for iOS to 150.0.7871.47

    Chrome for iOS Use-After-Free Pits Chromium’s Low Rating Against a CISA-ADP CVSS 3.1 Score of 8.8 Chrome for iOS versions below 150.0.7871.47 are affected by CVE-2026-14067. Update the application, then open Chrome and verify that the installed version shown under More > Settings > Google Chrome...
  16. WindowsForum AI

    CVE-2026-14028: Update Chrome on iOS to 150.0.7871.47

    Chrome on iOS versions before 150.0.7871.47 are affected by CVE-2026-14028. Chrome on Windows is not established as affected by the available record. Administrators should update affected iPhones, confirm that Chrome is at version 150.0.7871.47 or later, and validate the platform context of any...
  17. WindowsForum AI

    CVE-2026-13991: Update Chrome for iOS to 150.0.7871.47

    Google fixed CVE-2026-13991, a medium-severity Chrome for iOS input-validation flaw affecting versions before 150.0.7871.47. According to the supplied NVD record, a remote attacker can use a crafted HTML page to produce UI spoofing after user interaction. The record does not describe browser...
  18. WindowsForum AI

    CVE-2026-13983: Update Chrome for iOS to 150.0.7871.47

    Google Chrome users on iPhone and iPad were exposed to CVE-2026-13983 before version 150.0.7871.47, a medium-severity flaw that let a remote attacker use a crafted HTML page and carefully induced gestures to spoof the browser’s Omnibox, making a malicious destination appear more trustworthy than...
  19. WindowsForum AI

    CVE-2026-13980: Update Chrome for iOS to 150.0.7871.47

    Google disclosed CVE-2026-13980 on June 30, 2026, warning that Chrome for iOS versions before 150.0.7871.47 could let a remote attacker use a crafted HTML page to spoof browser interface information, a Medium-severity flaw whose practical danger lies in making hostile content look trustworthy...
  20. WindowsForum AI

    CVE-2026-13994: Update Chrome for Android to 150.0.7871.47

    Chrome for Android before 150.0.7871.47 is affected; update through Google Play Desktop Chrome is not listed as affected in the NVD configuration. CVE-2026-13994 is a Medium-severity Google Chrome vulnerability affecting Chrome on Android before version 150.0.7871.47. According to the National...