Description
Information leak in Omnibox in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to leak sensitive information via UI Interaction. (Chromium security severity: Medium)
Published: 2026-11-03
Score: n/a
EPSS: n/a
KEV: No
Impact: Information Disclosure
Action: Update Browser
AI Analysis

Impact

An information leak exists in the Omnibox component of Google Chrome on Android devices running versions earlier than 157.0.8103.38. The flaw permits a remote attacker to obtain sensitive data through user interface interactions. The vulnerability is classified as a disclosure of information (CWE‑200) and is reported with a medium security severity.

Affected Systems

Google Chrome for Android is affected. Any device running a Chrome build before version 157.0.8103.38 on Android is vulnerable. The issue does not impact other platforms or newer browser releases that incorporate the patch.

Risk and Exploitability

The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. No public exploits are known, and the flaw is limited to a UI interaction that leaks data, making it moderately risky without a high exploitation probability. The severity is medium, indicating that remediation should be performed promptly to prevent accidental disclosure.

Generated by OpenCVE AI on November 3, 2026 at 21:58 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update Chrome on all Android devices to version 157.0.8103.38 or newer.
  • If a rapid update is not possible, refrain from entering sensitive credentials or confidential information into Omnibox on affected versions.
  • Use Chrome's Incognito mode or disable autocomplete for sensitive data to reduce potential leakage.

Generated by OpenCVE AI on November 3, 2026 at 21:58 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 03 Nov 2026 22:30:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Tue, 03 Nov 2026 22:15:00 +0000

Type Values Removed Values Added
Title Omnibox Information Leak Allows Remote Leakage on Android

Tue, 03 Nov 2026 20:45:00 +0000

Type Values Removed Values Added
Description Information leak in Omnibox in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to leak sensitive information via UI Interaction. (Chromium security severity: Medium)
Weaknesses CWE-200
References

Subscriptions

Google Chrome
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-11-03T20:42:42.857Z

Reserved: 2026-11-03T09:30:07.364Z

Link: CVE-2026-121106

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-11-03T21:17:16.960

Modified: 2026-11-03T21:17:17.063

Link: CVE-2026-121106

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-11-03T22:15:02Z

Weaknesses
  • CWE-200

    Exposure of Sensitive Information to an Unauthorized Actor