CVE-2020-15978: Insufficient data validation in navigation in Google Chrome on Android prior to 86.0.4240.75 allowed a remo...

Security readout for executives and security teams

This Chrome on Android flaw could let an attacker bypass browser navigation restrictions after already compromising the renderer process. The source bundle does not provide CVSS, CWE, or evidence of active exploitation. Treat it as a browser defense-in-depth issue that matters most on unmanaged or outdated mobile devices. Primary exposure is Android devices running Chrome earlier than 86.0.4240.75. The bundle also cites Linux distribution Chromium advisories, but does not clearly map those packages to this specific Android-described condition. Exposure should be verified through device and package inventory. Handle through standard browser patch governance with elevated attention for mobile fleets. It is not shown as actively exploited in the supplied sources, but outdated browsers are high-value targets and this flaw could strengthen an exploit chain. Mitigation focus: Update Chrome on Android to 86.0.4240.75 or later.; Apply Chromium package updates from relevant Linux distribution advisories.; Use MDM or endpoint tooling to block obsolete browser versions..

Prepared

Jun 5, 2026, 13:51 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.