EUVD-2026-40549
GHSA-j37g-2qp6-q3pv
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Local malicious file requiring user interaction with no prior privileges (AV:L/PR:N/UI:R); privilege escalation yields high C/I/A within the unchanged browser scope.
Primary rating from Vendor (google).
CVSS VectorVendor: google
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
4DescriptionCVE.org
Insufficient validation of untrusted input in CustomTabs in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: Medium)
AnalysisAI
Privilege escalation in Google Chrome for Android (CustomTabs) prior to 150.0.7871.47 allows a local attacker to escalate privileges by supplying a malicious file that CustomTabs fails to validate properly. Google rates the Chromium severity as Medium, and the requirement for user interaction plus local access limits remote mass exploitation. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires local access to the Android device and involves Chrome's CustomTabs feature: an attacker (typically a malicious app already installed on the device, or a malicious file placed on it) must supply crafted untrusted input via a file, and the victim must perform an interaction that causes Chrome to process it (CVSS UI:R). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, score 7.8 High) describes a local, low-complexity, no-privilege attack that nonetheless requires user interaction and yields high confidentiality, integrity, and availability impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | A user installs a malicious or compromised Android app; when the user taps a link or content that opens in a Chrome CustomTab, the app passes a crafted malicious file whose untrusted input Chrome fails to validate, letting the attacker escalate privileges within the browser context on the device. The single required user interaction is realistic during normal app usage. … |
| Remediation | Vendor-released patch: update Google Chrome for Android to version 150.0.7871.47 or later, delivered through the Chrome Releases stable channel (https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html); on Android this arrives via Google Play, so ensure automatic app updates are enabled or manually update Chrome from the Play Store. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Audit current Chrome for Android versions across managed devices and BYOD inventory. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-20 – Improper Input Validation
View allSame technique Privilege Escalation
View allVendor StatusVendor
SUSE
Severity: Important| Product | Status |
|---|---|
| SUSE Package Hub 15 SP7 | Fixed |
| openSUSE Tumbleweed | Fixed |
| SUSE Package Hub 15 SP7 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today