# Google Chrome for Android vulnerabilities

Source: https://junglewise.ai/threats/technologies/chrome-for-android  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/technologies/chrome-for-android.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 21 vulnerabilities in Google Chrome for Android: 0 in the last 7 days and 0 in the last 90 days, 2 of them critical and 2 exploited in the wild. The most recent, CVE-2026-17741, was published on 30 July 2026.

## Counts

- Last 7 days: 0
- Last 30 days: 0
- Last 90 days: 0
- All time: 21 (2 critical, 2 exploited in the wild)

## About Google Chrome for Android

Chrome for Android is a web browser for Android mobile devices.

## Latest Google Chrome for Android vulnerabilities

- [CVE-2026-17741: Google Chrome WebView sandbox escape via improper input validation](https://junglewise.ai/threats/cve-2026-17741-google-chrome-webview-sandbox-escape-via-improper-input) (info, CVSS 6.5, published 30 Jul 2026)
- [CVE-2026-13924: Google Chrome WebView Same Origin Policy bypass](https://junglewise.ai/threats/cve-2026-13924-google-chrome-webview-same-origin-policy-bypass) (info, CVSS 4.3, published 30 Jun 2026)
- [CVE-2026-13870: Google Chrome WebView use after free in Android](https://junglewise.ai/threats/cve-2026-13870-google-chrome-webview-use-after-free-in-android) (info, CVSS 6.5, published 30 Jun 2026)
- [CVE-2026-13037: Google Chrome for Android use after free in WebView](https://junglewise.ai/threats/cve-2026-13037-google-chrome-for-android-use-after-free-in-webview) (info, published 24 Jun 2026)
- [CVE-2026-12438: Google Chrome WebView sandbox escape on Android](https://junglewise.ai/threats/cve-2026-12438-google-chrome-webview-sandbox-escape-on-android) (high, CVSS 8.3, published 17 Jun 2026)
- [CVE-2026-11297: Google Chrome for Android navigation bypass in Reader Mode](https://junglewise.ai/threats/cve-2026-11297-google-chrome-for-android-navigation-bypass-in-reader-mode) (info, CVSS 2, published 5 Jun 2026)
- [CVE-2026-11291: Google Chrome for Android SOP bypass in Android Autofill](https://junglewise.ai/threats/cve-2026-11291-google-chrome-for-android-sop-bypass-in-android-autofill) (info, published 5 Jun 2026)
- [CVE-2026-11247: Google Chrome for Android cross-origin data leak in CustomTabs](https://junglewise.ai/threats/cve-2026-11247-google-chrome-for-android-cross-origin-data-leak-in-customtabs) (info, CVSS 3.3, published 5 Jun 2026)
- [CVE-2026-11215: Google Chrome for Android domain spoofing in Cronet](https://junglewise.ai/threats/cve-2026-11215-google-chrome-for-android-domain-spoofing-in-cronet) (info, CVSS 4.3, published 4 Jun 2026)
- [CVE-2026-11175: Google Chrome for Android UI spoofing in Messages](https://junglewise.ai/threats/cve-2026-11175-google-chrome-for-android-ui-spoofing-in-messages) (info, CVSS 4.3, published 4 Jun 2026)
- [CVE-2026-11167: Google Chrome for Android sandbox escape in WebView](https://junglewise.ai/threats/cve-2026-11167-google-chrome-for-android-sandbox-escape-in-webview) (info, published 4 Jun 2026)
- [CVE-2026-11163: Google Chrome for Android use after free in Messages](https://junglewise.ai/threats/cve-2026-11163-google-chrome-for-android-use-after-free-in-messages) (info, CVSS 6.5, published 4 Jun 2026)
- [CVE-2026-11097: Google Chrome WebView cross-origin data leak on Android](https://junglewise.ai/threats/cve-2026-11097-google-chrome-webview-cross-origin-data-leak-on-android) (info, CVSS 4.3, published 4 Jun 2026)
- [CVE-2026-11035: Google Chrome for Android privilege escalation in Custom Tabs](https://junglewise.ai/threats/cve-2026-11035-google-chrome-for-android-privilege-escalation-in-custom-tabs) (info, CVSS 0, published 4 Jun 2026)
- [CVE-2026-9892: Google Chrome Skia sandbox escape on Android](https://junglewise.ai/threats/cve-2026-9892-google-chrome-skia-sandbox-escape-on-android) (info, CVSS 9.8, published 28 May 2026)
- [CVE-2026-9888: Google Chrome WebView use after free sandbox escape](https://junglewise.ai/threats/cve-2026-9888-google-chrome-webview-use-after-free-sandbox-escape) (info, published 28 May 2026)
- [CVE-2026-8583: Google Chrome for Android insufficient policy enforcement in WebXR](https://junglewise.ai/threats/cve-2026-8583-google-chrome-for-android-insufficient-policy-enforcement-in-webxr) (medium, CVSS 5.3, published 14 May 2026)
- [CVE-2026-8572: Google Chrome insufficient policy enforcement in Network](https://junglewise.ai/threats/cve-2026-8572-google-chrome-insufficient-policy-enforcement-in-network) (low, CVSS 3.1, published 14 May 2026)
- [CVE-2017-5070: Google Chromium V8 Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2017-5070-google-chromium-v8-type-confusion-vulnerability) (critical, exploited in the wild, CVSS 8.8, published 8 Jun 2022)
- [CVE-2017-5030: Google Chromium V8 Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2017-5030-google-chromium-v8-memory-corruption-vulnerability) (critical, exploited in the wild, CVSS 8.8, published 8 Jun 2022)
- [CVE-2016-5209: Google Chrome bad casting in Blink bitmap manipulation](https://junglewise.ai/threats/cve-2016-5209-google-chrome-bad-casting-in-blink-bitmap-manipulation) (high, CVSS 8.8, published 19 Jan 2017)

## Most severe Google Chrome for Android vulnerabilities

- [CVE-2017-5030: Google Chromium V8 Memory Corruption Vulnerability](https://junglewise.ai/threats/cve-2017-5030-google-chromium-v8-memory-corruption-vulnerability) (critical, exploited in the wild, CVSS 8.8, published 8 Jun 2022)
- [CVE-2017-5070: Google Chromium V8 Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2017-5070-google-chromium-v8-type-confusion-vulnerability) (critical, exploited in the wild, CVSS 8.8, published 8 Jun 2022)
- [CVE-2016-5209: Google Chrome bad casting in Blink bitmap manipulation](https://junglewise.ai/threats/cve-2016-5209-google-chrome-bad-casting-in-blink-bitmap-manipulation) (high, CVSS 8.8, published 19 Jan 2017)
- [CVE-2026-12438: Google Chrome WebView sandbox escape on Android](https://junglewise.ai/threats/cve-2026-12438-google-chrome-webview-sandbox-escape-on-android) (high, CVSS 8.3, published 17 Jun 2026)
- [CVE-2026-8583: Google Chrome for Android insufficient policy enforcement in WebXR](https://junglewise.ai/threats/cve-2026-8583-google-chrome-for-android-insufficient-policy-enforcement-in-webxr) (medium, CVSS 5.3, published 14 May 2026)
- [CVE-2026-8572: Google Chrome insufficient policy enforcement in Network](https://junglewise.ai/threats/cve-2026-8572-google-chrome-insufficient-policy-enforcement-in-network) (low, CVSS 3.1, published 14 May 2026)
- [CVE-2026-9892: Google Chrome Skia sandbox escape on Android](https://junglewise.ai/threats/cve-2026-9892-google-chrome-skia-sandbox-escape-on-android) (info, CVSS 9.8, published 28 May 2026)
- [CVE-2026-17741: Google Chrome WebView sandbox escape via improper input validation](https://junglewise.ai/threats/cve-2026-17741-google-chrome-webview-sandbox-escape-via-improper-input) (info, CVSS 6.5, published 30 Jul 2026)
- [CVE-2026-13870: Google Chrome WebView use after free in Android](https://junglewise.ai/threats/cve-2026-13870-google-chrome-webview-use-after-free-in-android) (info, CVSS 6.5, published 30 Jun 2026)
- [CVE-2026-11163: Google Chrome for Android use after free in Messages](https://junglewise.ai/threats/cve-2026-11163-google-chrome-for-android-use-after-free-in-messages) (info, CVSS 6.5, published 4 Jun 2026)

## Vulnerabilities per week

Nothing was published in the last eight weeks.

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 0 | 0 | 0 |
| 24 Aug 2026 | 0 | 0 | 0 |
| 31 Aug 2026 | 0 | 0 | 0 |
| 7 Sep 2026 | 0 | 0 | 0 |
| 14 Sep 2026 | 0 | 0 | 0 |
| 21 Sep 2026 | 0 | 0 | 0 |
| 28 Sep 2026 | 0 | 0 | 0 |
| 5 Oct 2026 | 0 | 0 | 0 |
| 12 Oct 2026 | 0 | 0 | 0 |
| 19 Oct 2026 | 0 | 0 | 0 |
| 26 Oct 2026 | 0 | 0 | 0 |
| 2 Nov 2026 | 0 | 0 | 0 |
| 9 Nov 2026 | 0 | 0 | 0 |

## Other Google technologies

- [Google Chrome](https://junglewise.ai/threats/technologies/chrome): 3,930 vulnerabilities
- [Google Android](https://junglewise.ai/threats/technologies/android): 628 vulnerabilities
- [Google Chrome for iOS](https://junglewise.ai/threats/technologies/chrome-for-ios): 79 vulnerabilities
- [Google Pixel](https://junglewise.ai/threats/technologies/google-pixel): 72 vulnerabilities
- [Google Cloud Platform](https://junglewise.ai/threats/technologies/google-cloud-platform): 43 vulnerabilities
- [Google Chromium V8](https://junglewise.ai/threats/technologies/chromium-v8): 41 vulnerabilities
- [Google Chromium](https://junglewise.ai/threats/technologies/chromium): 37 vulnerabilities
- [Google TensorFlow](https://junglewise.ai/threats/technologies/tensorflow): 31 vulnerabilities
- [Google Pixel Devices](https://junglewise.ai/threats/technologies/pixel-devices): 27 vulnerabilities
- [Google Pixel Firmware](https://junglewise.ai/threats/technologies/pixel-firmware): 27 vulnerabilities
- [Google Android Framework](https://junglewise.ai/threats/technologies/android-framework): 22 vulnerabilities
- [Google ChromeOS](https://junglewise.ai/threats/technologies/chromeos): 20 vulnerabilities

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Google Chrome for Android vulnerabilities", https://junglewise.ai/threats/technologies/chrome-for-android, 12 November 2026.