Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
🟠 #Google Chrome on #Android, Cross-Origin Data Leak, #CVE-2026-11007 (Medium) -DC-Jun2026-284 https://dailycve.com/google-chrome-on-android-cross-origin-data-leak-cve-2026-11007-medium-dc-jun2026-284/
Post summary
The article announces a medium‑severity cross‑origin data leak vulnerability (CVE‑2026‑11007) in Google Chrome on Android but does not provide PoC, exploit, or mitigation details.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | android | - | - | - | |
| App | chrome | - | - | - |