CVE-2026-22072

High

Open

TLP:CLEAR

Arbitrary URL Loading in WebView Leading to Token Leakage Risk

NVD CVE.org

AI Analysis

No AI analysis yet.

Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens.

CVSS Score: 8.3
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:H/SI:L/SA:N
Confidence: 90%
Published: Aug 17, 2026
Last Modified: Aug 17, 2026

Notes

0

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

0

No opinions yet. Be the first to assess this intelligence.