CVE-2026-15115

Description

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.115 allowed a local attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)

References

https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_01162222768.html

https://issues.chromium.org/issues/520576676

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3