CVE Watchtower ← Back to CVE ListCVE-2026-22072NVDVulnerability SummaryLoading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens.Severity LevelUNKNOWNPublished DateAug 17, 2026Last ModifiedAug 17, 2026Exploitation StatusNo confirmed exploitation yetEPSS Score (30-Day)0.25%ProbabilityRoot Weakness (CWE)N/AExternal Referenceshttps://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE-2088198578949595136