Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2026-22072

Arbitrary URL Loading in WebView Leading to Token Leakage Risk

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OPPO

Description

Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OPPO OPPO Health

Default version status: unaffected

  • 6.2.9affected

References