CVE Catalog
CVE-2026-22072
HighCVSS 8.3Exploitation Probability (EPSS)
Low risk0.25%
17th percentile - higher than 17% of all known CVEs
Summary
Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens.
Risk Assessment
Users may lose their authentication tokens, potentially leading to unauthorized access to their accounts and data.
Recommendation
Restrict the ability to load external URLs in WebView and implement content validation mechanisms.
Original NVD description (English source)
Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens.