Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 148.0.7778.216 allowed a local attacker to execute arbitrary code via a malicious file. (Chromium security severity: High)
History

Thu, 28 May 2026 22:45:00 +0000

Type Values Removed Values Added
Description Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 148.0.7778.216 allowed a local attacker to execute arbitrary code via a malicious file. (Chromium security severity: High)
Weaknesses CWE-20
References

cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-05-28T22:25:46.650Z

Reserved: 2026-05-28T17:25:08.339Z

Link: CVE-2026-9987

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-05-28T23:16:56.940

Modified: 2026-05-28T23:16:56.940

Link: CVE-2026-9987

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.