WebAPK Vulnerability in Google Chrome for Android

CVE-2026-106221

What is CVE-2026-106221?

A vulnerability exists in the WebAPKs within Google Chrome for Android that allows remote attackers to exploit a confused deputy scenario. By leveraging social engineering techniques, attackers can create a crafted HTML page that bypasses web origin policies. This could potentially enable unauthorized actions or access to sensitive information by tricking users into interacting with malicious content.

References