Server-Side Request Forgery in Google Chrome for Android
CVE-2026-93384

Currently unrated

Key Information:

Vendor: Google
Status: Chrome
Vendor: CVE Published:; 17 September 2026

What is CVE-2026-93384?

A server-side request forgery vulnerability exists in the Omnibox component of Google Chrome on Android prior to version 153.0.8010.52. This flaw enables a remote attacker to exploit social engineering techniques to bypass system access restrictions through specially crafted network traffic, potentially compromising user security and privacy.

Affected Version(s)

Chrome 153.0.8010.52

References

https://chromereleases.googleblog.com/2026/09/stable-chan...

https://issues.chromium.org/issues/511832293

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 17, 2026
Vulnerability Reserved
Sep 17, 2026

CVE-2026-93384 Data

JSON