Boletines de Vulnerabilidades

CVE-2026-11034

   
Software afectado ANDROID
 
Insufficient validation of untrusted input in Tab Group Sync in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via malicious network traffic. (Chromium security severity: Medium)

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-11034