| Summary | Insufficient validation of untrusted input in Tab Group Sync in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via malicious network traffic. (Chromium security severity: Medium) |
|---|---|
| Publication Date | June 5, 2026, 8:17 a.m. |
| Registration Date | June 6, 2026, 4:12 a.m. |
| Last Update | June 6, 2026, 12:02 a.m. |