Vulnerability Bulletins

CVE-2026-106367

   
Affected software ANDROID
 
Missing authorization in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a co-installed app. (Chromium security severity: Medium)

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-106367