Insufficient Input Validation in Google Chrome's Payments on Android Devices

CVE-2026-7993

What is CVE-2026-7993?

A vulnerability in the Payments feature of Google Chrome on Android devices allows a remote attacker to exploit insufficient validation of untrusted input. By compromising the renderer process, an attacker can spoof the Omnibox content using a specially crafted HTML page. This can lead to deceptive user experiences and potentially facilitate further attacks. Users are urged to update their browser to the latest version to mitigate this risk.

References