{"id":"CVE-2026-78997","title":"UC Browser for Android (package com.UCMobile.intl, version 13.7.8.1314) contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScript in the context of any origin","summary":"UC Browser for Android (package com.UCMobile.intl, version 13.7.8.1314) contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScript in the context of any origin. An attacker hosts a spe…","severity":"critical","cvss":9.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","cwe":["CWE-79"],"published":"2026-09-08","updated":"2026-09-09","sourceUpdated":"2026-09-09T19:17:47.723","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-78997","references":[{"url":"https://gist.github.com/OmriInbar-Novee/9fd65fe08c1b1cff6a19350e44425de2","label":"cve@mitre.org"},{"url":"https://gist.github.com/OmriInbar-Novee/ef7a92db148b2eb1ab0aa7b99a565c4c","label":"cve@mitre.org"},{"url":"https://gist.github.com/OmriInbar-Novee/9fd65fe08c1b1cff6a19350e44425de2","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"total","timestamp":"2026-09-09T18:15:20.006490Z"},"epss":0.00278,"epssPercentile":0.20491,"ingestedAt":"2026-09-08T19:08:49.674Z","exploits":{"github":1,"githubRepos":["https://github.com/Hunt-Benito/the-callback-that-outlived-the-page-cve-2026-78997-uc-browser-android-universal-xss"],"checkedAt":"2026-09-21T15:30:44.998Z"},"slug":"CVE-2026-78997","body":"## Overview\n\nUC Browser for Android (package com.UCMobile.intl, version 13.7.8.1314) contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScript in the context of any origin. An attacker hosts a specially crafted URL on a UC-owned domain (via a reflected XSS) that leverages the browser's internal JavaScript bridge to register a deferred callback, navigate the tab to a victim site, and then execute attacker-controlled code on that site when a login dialog is dismissed.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"abyssal","depthScore":63,"depthScoreParts":{"impact":51.2,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":201959,"id":"CVE-2026-78997","ts":1789399993258,"field":"exploit_available","old":"false","new":"true"},{"seq":201958,"id":"CVE-2026-78997","ts":1789399993258,"field":"cvss","old":null,"new":"9.3"},{"seq":201957,"id":"CVE-2026-78997","ts":1789399993258,"field":"severity","old":"none","new":"critical"},{"seq":200686,"id":"CVE-2026-78997","ts":1789397585399,"field":"exploit_available","old":"true","new":"false"},{"seq":200685,"id":"CVE-2026-78997","ts":1789397585399,"field":"cvss","old":"9.3","new":null},{"seq":200684,"id":"CVE-2026-78997","ts":1789397585399,"field":"severity","old":"critical","new":"none"},{"seq":199390,"id":"CVE-2026-78997","ts":1789395475435,"field":"exploit_available","old":"false","new":"true"},{"seq":199389,"id":"CVE-2026-78997","ts":1789395475435,"field":"cvss","old":null,"new":"9.3"},{"seq":199388,"id":"CVE-2026-78997","ts":1789395475435,"field":"severity","old":"none","new":"critical"},{"seq":198635,"id":"CVE-2026-78997","ts":1789392188121,"field":"exploit_available","old":"true","new":"false"},{"seq":198634,"id":"CVE-2026-78997","ts":1789392188121,"field":"cvss","old":"9.3","new":null},{"seq":198633,"id":"CVE-2026-78997","ts":1789392188121,"field":"severity","old":"critical","new":"none"},{"seq":196966,"id":"CVE-2026-78997","ts":1789384273065,"field":"exploit_available","old":"false","new":"true"},{"seq":196965,"id":"CVE-2026-78997","ts":1789384273065,"field":"cvss","old":null,"new":"9.3"},{"seq":196964,"id":"CVE-2026-78997","ts":1789384273065,"field":"severity","old":"none","new":"critical"},{"seq":194097,"id":"CVE-2026-78997","ts":1789378693780,"field":"exploit_available","old":"true","new":"false"},{"seq":194096,"id":"CVE-2026-78997","ts":1789378693780,"field":"cvss","old":"9.3","new":null},{"seq":194095,"id":"CVE-2026-78997","ts":1789378693780,"field":"severity","old":"critical","new":"none"},{"seq":192884,"id":"CVE-2026-78997","ts":1789376494345,"field":"exploit_available","old":"false","new":"true"},{"seq":192883,"id":"CVE-2026-78997","ts":1789376494345,"field":"cvss","old":null,"new":"9.3"},{"seq":192882,"id":"CVE-2026-78997","ts":1789376494345,"field":"severity","old":"none","new":"critical"},{"seq":191671,"id":"CVE-2026-78997","ts":1789373590311,"field":"exploit_available","old":"true","new":"false"},{"seq":191670,"id":"CVE-2026-78997","ts":1789373590311,"field":"cvss","old":"9.3","new":null},{"seq":191669,"id":"CVE-2026-78997","ts":1789373590311,"field":"severity","old":"critical","new":"none"},{"seq":190456,"id":"CVE-2026-78997","ts":1789369449424,"field":"exploit_available","old":"false","new":"true"},{"seq":190455,"id":"CVE-2026-78997","ts":1789369449424,"field":"cvss","old":null,"new":"9.3"},{"seq":190454,"id":"CVE-2026-78997","ts":1789369449424,"field":"severity","old":"none","new":"critical"},{"seq":189243,"id":"CVE-2026-78997","ts":1789368373346,"field":"exploit_available","old":"true","new":"false"},{"seq":189242,"id":"CVE-2026-78997","ts":1789368373346,"field":"cvss","old":"9.3","new":null},{"seq":189241,"id":"CVE-2026-78997","ts":1789368373346,"field":"severity","old":"critical","new":"none"},{"seq":188026,"id":"CVE-2026-78997","ts":1789365211416,"field":"exploit_available","old":"false","new":"true"},{"seq":188025,"id":"CVE-2026-78997","ts":1789365211416,"field":"cvss","old":null,"new":"9.3"},{"seq":188024,"id":"CVE-2026-78997","ts":1789365211416,"field":"severity","old":"none","new":"critical"},{"seq":186813,"id":"CVE-2026-78997","ts":1789363454878,"field":"exploit_available","old":"true","new":"false"},{"seq":186812,"id":"CVE-2026-78997","ts":1789363454878,"field":"cvss","old":"9.3","new":null},{"seq":186811,"id":"CVE-2026-78997","ts":1789363454878,"field":"severity","old":"critical","new":"none"},{"seq":185599,"id":"CVE-2026-78997","ts":1789361195142,"field":"exploit_available","old":"false","new":"true"},{"seq":185598,"id":"CVE-2026-78997","ts":1789361195142,"field":"cvss","old":null,"new":"9.3"},{"seq":185597,"id":"CVE-2026-78997","ts":1789361195142,"field":"severity","old":"none","new":"critical"},{"seq":184386,"id":"CVE-2026-78997","ts":1789358318865,"field":"exploit_available","old":"true","new":"false"},{"seq":184385,"id":"CVE-2026-78997","ts":1789358318865,"field":"cvss","old":"9.3","new":null},{"seq":184384,"id":"CVE-2026-78997","ts":1789358318865,"field":"severity","old":"critical","new":"none"},{"seq":182637,"id":"CVE-2026-78997","ts":1789354302486,"field":"exploit_available","old":"false","new":"true"},{"seq":182636,"id":"CVE-2026-78997","ts":1789354302486,"field":"cvss","old":null,"new":"9.3"},{"seq":182635,"id":"CVE-2026-78997","ts":1789354302486,"field":"severity","old":"none","new":"critical"},{"seq":181430,"id":"CVE-2026-78997","ts":1789353279998,"field":"exploit_available","old":"true","new":"false"},{"seq":181429,"id":"CVE-2026-78997","ts":1789353279998,"field":"cvss","old":"9.3","new":null},{"seq":181428,"id":"CVE-2026-78997","ts":1789353279998,"field":"severity","old":"critical","new":"none"},{"seq":180223,"id":"CVE-2026-78997","ts":1789350265294,"field":"exploit_available","old":"false","new":"true"},{"seq":180222,"id":"CVE-2026-78997","ts":1789350265294,"field":"cvss","old":null,"new":"9.3"}]}