Back to overview

CVE-2026-15115

Description
Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.115 allowed a local attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)

Metadata

CVE ID
CVE-2026-15115
State
PUBLISHED
Assigner
Chrome
Reserved
2026-07-08 17:07 UTC
Published
2026-07-08 22:36 UTC
Last updated
2026-07-08 22:36 UTC
Primary CWE
CWE-20
Insufficient validation of untrusted input
Vendor / Product
Google / Chrome
Sources
cve.org  ·  NVD

Severity & Metrics

No CVSS data available.

Affected products (1)
VendorProductPlatformVersions
Google Chrome 150.0.7871.115 < 150.0.7871.115
Weakness (CWE)
CWESourceDescription
CWE-20 cna Insufficient validation of untrusted input
Back to overview