The content view client in Google Chrome prior to 54.0.2840.85 for Android insufficiently validated intent URLs, which allowed a remote attacker who had compromised the renderer process to start arbitrary activity on the system via a crafted HTML page.
| Software | From | Fixed in |
|---|---|---|
| google / chrome | - | 54.0.2840.68.x |