Insufficient Policy Enforcement in Google Chrome for Android
CVE-2026-8566
Currently unrated
What is CVE-2026-8566?
A vulnerability in Google Chrome for Android versions prior to 148.0.7778.168 enables remote attackers to bypass discretionary access control mechanisms. By crafting a specific HTML page, an attacker can exploit the insufficient policy enforcement, potentially leading to unauthorized access and manipulation of sensitive data. This flaw underscores the importance of keeping web browsers updated to mitigate risks associated with such vulnerabilities.
Affected Version(s)
Chrome 148.0.7778.168