All intelligence
// vulnerability record
cached · NVD via COSMOS syncCVE-2026-22072
HIGHpublished 2026-08-17 07:17 UTC · 1 day ago · modified 2026-08-17 16:16 UTC
8.3
CVSS / 10
// description
Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens.
// weaknesses (CWE)
- CWE-20