PT-2026-50188 · Google · Webview+1
CVE-2026-12438
·
Published
2026-06-17
·
Updated
2026-08-31
CVSS v3.1
8.3
High
| Vector | AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Google Chrome on Android versions prior to 149.0.7827.155
Description
An inappropriate implementation in WebView allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. A sandbox escape occurs when a process breaks out of its restricted environment to gain unauthorized access to the underlying system.
Recommendations
Update to version 149.0.7827.155 or later.
Fix
DoS
Protection Mechanism Failure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Chrome On Android
Webview