OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-95302

LOW · CVSS 2.9 EPSS 0.11%

Source: NVD + CISA KEV + EPSS · Published 2026-09-29 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

Incorrect authorization in WebAPKs on affected versions of Google Chrome for Android allows local attackers to access cross-origin data through co-installed applications. While the vulnerability is rated low in severity, it poses a risk to user privacy and data integrity. Developers and security teams managing Android applications should prioritize addressing this issue to mitigate potential data exposure.

CVE
CVE-2026-95302
Severity
LOW
CVSS
2.9
EPSS
0.11%
Android Chrome

Original NVD Description

Incorrect authorization in WebAPKs in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to obtain cross-origin data via a co-installed app. (Chromium security severity: Medium)

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-106427 MEDIUM CVE-2026-106426 HIGH CVE-2026-106424 MEDIUM CVE-2026-106423 HIGH CVE-2026-106422 MEDIUM CVE-2026-106421 HIGH