PT-2026-44566 · Google · Chrome On Android

CVE-2026-10010 · Published 2026-05-28 · Updated 2026-06-03

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 148.0.7778.216

Description An inappropriate implementation in the input handling allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted HTML page. Site isolation is a security mechanism that ensures pages from different sites are run in separate processes to prevent data theft.

Recommendations Update to version 148.0.7778.216 or later.

Fix

Origin Validation Error

Weakness Enumeration

CWE-346

Related Identifiers

CVE-2026-10010

ECHO-607C-3B1F-69E7

OPENSUSE-SU-2026:10906-1

Affected Products

Chrome On Android

References · 159

• https://security-tracker.debian.org/tracker/CVE-2026-10010 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-10010 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10906-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-10010 · Security Note
• https://suse.com/security/cve/CVE-2026-10017 · Note
• https://suse.com/security/cve/CVE-2026-9950 · Note
• https://suse.com/security/cve/CVE-2026-9951 · Note
• https://suse.com/security/cve/CVE-2026-9912 · Note
• https://suse.com/security/cve/CVE-2026-10015 · Note
• https://suse.com/security/cve/CVE-2026-9957 · Note
• https://suse.com/security/cve/CVE-2026-9947 · Note
• https://suse.com/security/cve/CVE-2026-9938 · Note
• https://suse.com/security/cve/CVE-2026-9927 · Note
• https://suse.com/security/cve/CVE-2026-9903 · Note
• https://suse.com/security/cve/CVE-2026-9918 · Note