New MCP server — Bring vulnerability intelligence into your AI
Back to feed

CVE-2026-95328

NVDCIRCLENISA

EUVD-2026-89167 · Published Sep 29, 2026 · 3w ago

Confused deputy in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-installed app. (Chromium security severity: Low)

Technologies

Google AndroidGoogle Chrome

Weaknesses

CWE-441

CVSS scores

  • v3.16.5CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

Initial Access Command and Control

References

Potentially impacted assets

See if this affects your attack surface

News

Our latest news

Couldn’t load the latest news.

Take 15 minutes to discover our platform with our experts

PatrowlIntel platform screenshot