Philipp Beer

The issue is related to an inappropriate implementation in Custom Tabs, allowing a remote attacker to perform privilege escalation via a crafted app if the user is convinced to engage in specific UI gestures.

The Custom Tabs feature in Android apps can load web pages and supports a transition animation. This animation could be used to deceive users into granting sensitive permissions by concealing what they are actually clicking.

The issue is related to an inappropriate implementation in Custom Tabs in Google Chrome on Android, allowing a remote attacker to leak cross-origin data via a crafted HTML page. This is due to incorrectly implemented security checks for standard elements, potentially enabling a remote attacker to access confidential information.

The issue is related to insufficient validation of untrusted input in CORS, allowing a remote attacker to bypass the same origin policy via a crafted HTML page. This could potentially enable an attacker to perform actions that would normally be restricted by the same origin policy.