PatchSiren cyber security CVE debrief

CVE-2026-12032 Google CVE debrief

CVE-2026-12032 is a High-severity vulnerability in Google Chrome on Android prior to 149.0.7827.115. This issue involves an inappropriate implementation in Passwords, allowing a remote attacker who has compromised the renderer process to bypass site isolation via a crafted HTML page.

Vendor: Google
Product: Chrome
CVSS: LOW 3.1
CISA KEV: Not listed in stored evidence
Original CVE published: 2026-06-11
Original CVE updated: 2026-06-12
Advisory published: 2026-06-11
Advisory updated: 2026-06-12

Who should care

Users of Google Chrome on Android prior to version 149.0.7827.115 should update to the latest version to mitigate this vulnerability.

Technical summary

The vulnerability, with a CVSS score of 3.1, was published on [cvePublishedAt] and modified on [cveModifiedAt]. It is categorized under CWE-346. For more information, refer to resourceLinkAnnotations [cve-org], [nvd], and [ref-4].

Defensive priority

High

Recommended defensive actions

Update Google Chrome to version 149.0.7827.115 or later.
Refer to [ref-4] for vendor advisory and [ref-5] for issue tracking.

Evidence notes

Evidence from [nvd] and [cve-org] supports the details of this CVE.

Official resources

CVE-2026-12032 CVE record
CVE.org
CVE-2026-12032 NVD detail
NVD
Source item URL
nvd_modified
Mitigation or vendor reference
[email protected] - Vendor Advisory
Source reference
[email protected] - Issue Tracking, Permissions Required

CVE-2026-12032 was published on 2026-06-11T22:16:55.773Z and modified on 2026-06-12T18:05:11.093Z.