Skip to content

CVE record · 1 source

CVE-2026-106715

NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView JavaScript bridge origin check.

Vendor: Google
Product: Android
Exposure class: Mobile OS

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

26

CVE NVD 9h ago

NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView JavaScript bridge origin check.

NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView JavaScript bridge origin check. An attacker can supply such a page through the newsbreak://openweb deep link and invoke NBJS.callNative…

CVE-2026-106715 Google