CVE-2026-9987 | Redsauce

Description

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 148.0.7778.216 allowed a local attacker to execute arbitrary code via a malicious file. (Chromium security severity: High)

EPSS 0.1%

Published: 2026-05-28 23:16:56; View source
Affected versions: <148.0.7778.216
Type: Core software
Last modified: 2026-07-21 12:10:00