CVE-2026-22072
Arbitrary URL Loading in WebView Leading to Token Leakage Risk
Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens.
CVSS 4.0 · 8.3 High
EPSS < 1%
KEV · Not listed
Vendors
Products