What is GHSA-5w72-wx9r-prrr?

GHSA-5w72-wx9r-prrr is a security advisory published by GitHub Security Advisories with High severity. Improper input validation in Core in Google Chrome on on Android prior to 157.0.8103.78 allowed a...

Which CVE IDs does GHSA-5w72-wx9r-prrr cover?

GHSA-5w72-wx9r-prrr covers the following CVE IDs: CVE-2026-126862. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-5w72-wx9r-prrr?

GHSA-5w72-wx9r-prrr has a CVSS v3 base score of 7.7, published by GitHub Security Advisories.

GHSA-5w72-wx9r-prrrHighCVSS 7.7

Improper input validation in Core in Google Chrome on on Android prior to 157.0.8103.78 allowed a...

Vendor

GitHub Security Advisories

Published

November 12, 2026

Last Modified

November 12, 2026

🔗 CVE IDs covered (1)

CVE-2026-126862 →

📋 Description

Improper input validation in Core in Google Chrome on on Android prior to 157.0.8103.78 allowed a local attacker to bypass web origin policy via a co-installed app. (Chromium security severity: High)

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-126862
https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html
https://issues.chromium.org/issues/574381704
https://github.com/advisories/GHSA-5w72-wx9r-prrr