mobile vulnerability management

CVE-2026-13964 is a medium-severity Chrome vulnerability affecting Android versions before 150.0.7871.47. The public description says insufficient policy enforcement in WebView could allow a remote attacker using crafted HTML to bypass navigation restrictions after user interaction. CISA’s...

Google fixed CVE-2026-13870 in Chrome for Android 150.0.7871.47, closing a CWE-416 WebView use-after-free flaw triggered by crafted HTML. Before that release, a remote attacker could potentially execute arbitrary code inside the browser sandbox after required user interaction. Chromium rates the...

Google’s CVE-2026-13809 is a high-severity Safe Browsing side-channel flaw affecting Chrome on iOS before version 150.0.7871.47. According to the Chrome-supplied CVE description, a remote attacker who has already compromised the renderer can use a crafted HTML page to leak cross-origin data. The...

On May 12, 2026, Microsoft published CVE-2026-41101 as a spoofing vulnerability affecting Microsoft Word for Android, with the Security Update Guide entry confirming the product, impact category, and vendor acknowledgement while offering only limited public technical detail about the underlying...