Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Google Chrome Android before 152 tricked to bypass restrictions

CVE-2026-85044 · published today
Summary

Versions of Google Chrome on Android released before version 152 can be fooled by a crafted web page to ignore the safety rules that keep different websites separate. This could let an attacker view or change information from other sites when a user clicks a deceptive link. Updating Chrome to the latest version or newer than 152 fixes the issue, and users should be cautious about clicking unknown links.

What to do
  • Update google chrome to version 152.0.7977.82 or later.
Affected software
VendorProductAffected versions
google chrome < 152.0.7977.82
Original advisory text
Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page....
Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
References
Type
CWE-672Operation on a Resource after Expiration or Release
Timeline
Published3 Sep 2026
Updated3 Sep 2026
First seen3 Sep 2026
Sources
CVE-2026-85044 · NVD
CVE-2026-85044 · MITRE
Monitor software like this
Free during beta