chromium -- security fixesentered 2026-05-08
no CVE referenced
Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 148.0.7778.96 allowed a local attacker to inject arbitrary scripts or HTML (UXSS) via a crafted Chrome Extension. (Chromium security severity: Medium)
According to its description, this CVE only applies to Android. FreeBSD ports are therefore not counted as affected.
no CVE referenced