CVE-2026-85044

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.82

Description A use of released resource issue in the mobile component allows a remote attacker to bypass the web origin policy. This is achieved by leveraging social engineering to entice a user to visit a crafted HTML page. The web origin policy is a security mechanism that prevents scripts on one page from accessing data on another page unless they share the same origin.

Recommendations Update Google Chrome on Android to version 152.0.7977.82 or later.