PT-2026-50198 · Google · Chrome On Android

CVE-2026-12448

·

Published

2026-06-17

·

Updated

2026-08-31

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 149.0.7827.155
Description An inappropriate implementation in the WebView component allows a remote attacker to perform privilege escalation by using a crafted HTML page.
Recommendations Update Google Chrome on Android to version 149.0.7827.155 or later.

Fix

DoS

LPE

Improper Privilege Management

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2026-12448
ECHO-261F-F150-D21D
OPENSUSE-SU-2026:11071-1
OPENSUSE-SU-2026:21135-1

Affected Products

Chrome On Android