CVE-2026-11291 | Google Chrome up to 148.0.7778.216 on Android Autofill cross-domain policy (ID 502346)
A vulnerability categorized as problematic has been discovered in Google Chrome on Android. This impacts an unknown function of the component Autofill. Such manipulation leads to permissive cross-domain policy with untrusted domains.
This vulnerability is uniquely identified as CVE-2026-11291. The attack can be launched remotely. No exploit exists.
It is advisable to upgrade the affected component.