CVE-2026-22072

Impact

Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• https://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE-2088198578949595136