CVE-2026-11072

HighCVSS 7.8

Published: 04/06/2026(UTC)Updated: 08/06/2026(UTC)Translated: 09/06/2026(UTC)NVD NIST

Summary

Use after free in WebView in Google Chrome on Android prior to version 149.0.7827.53 allowed a local attacker to execute arbitrary code via a malicious file.

Risk Assessment

An attacker could exploit this vulnerability to run unauthorized code, potentially compromising the device and user data.

Recommendation

It is recommended to update Google Chrome to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Use after free in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to execute arbitrary code via a malicious file. (Chromium security severity: Medium)