Volerion logoVolerion
Volerion logoVolerion

Google Chrome WebAppInstalls Insufficient Input Validation Vulnerability Allowing Arbitrary Code Execution on Android

Vulnerability

A vulnerability exists in Google Chrome on Android, in versions prior to 148.0.7778.216, due to inadequate validation of untrusted input in the WebAppInstalls component. This flaw enables a local attacker to execute arbitrary code by using a malicious file.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the affected device.

Remediation

Users can update to Google Chrome version 148.0.7778.216 or later to address this vulnerability.

Added: May 28, 2026, 11:26 PM
Updated: May 28, 2026, 11:26 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
7.5
exploitability
2.8
remediation
7.7
relevance
9.7
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.