PT-2026-46654

CVE-2026-11127

Published

2026-06-04

Updated

2026-08-31

Description by

CVSS 3.1

6.5

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 149.0.7827.53

Description An inappropriate implementation in WebAPKs allows a remote attacker to perform domain spoofing through the use of a crafted WebAPK. Domain spoofing is a technique where an attacker disguises a website as a different, trusted domain to deceive users.

Recommendations Update to version 149.0.7827.53 or later.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-358: Improperly Implemented Security Check for Standard

Related identifiers

CVE-2026-11127

ECHO-6992-8F14-DAFA

OPENSUSE-SU-2026:10958-1