PT-2026-54129
CVE-2026-13852
·
Published
2026-06-30
·
Updated
2026-08-31
Description by
CVSS 3.1
9.1
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Google Chrome on Android versions prior to 150.0.7871.47
Description
Insufficient validation of untrusted input in WebAppInstalls allows a local attacker to bypass discretionary access control, which is a security mechanism that restricts access to objects based on the identity of users or groups, by using a crafted HTML page.
Recommendations
Update Google Chrome on Android to version 150.0.7871.47 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾