CVE-2026-12065— Groww Stock, Mutual Fund, Gold App WebView URL improper authorization in handler for custom url scheme
Possible ATT&CK Techniques 3AI
T1059 · Command and Scripting Interpreter T1189 · Drive-by Compromise T1557 · Adversary-in-the-MiddleAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Groww | Stock, Mutual Fund, Gold App | 20260805 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-12065
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Groww Stock, Mutual Fund, Gold App WebView URL improper authorization in handler for custom url scheme
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was identified in Groww Stock, Mutual Fund, Gold App up to 20260805 on Android. This affects an unknown part of the component WebView URL Handler. The manipulation leads to improper authorization in handler for custom url scheme. It is possible to launch the attack on the physical device. The complexity of an attack is rather high. It is indicated that the exploitability is difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
自定义URL方案处理程序中的授权不正确
Source: CVE Program / CVE List V5
Vulnerability Title
Groww Stock 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Groww Stock是Groww公司的一个股票市场应用程序。 Groww Stock 20260805之前版本存在授权问题漏洞，该漏洞源于WebView URL Handler组件存在自定义URL方案处理程序授权不当，可能导致攻击者在物理设备上利用此漏洞。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Groww | Stock, Mutual Fund, Gold App | 20260805 | cpe:2.3:a:groww:stock_mutual_fund_gold_app:*:*:*:*:*:*:*:* |
II. Public POCs for CVE-2026-12065
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-12065
请登录查看更多情报信息。
Proof of Concept for CVE-2026-12065 (1)
Other References for CVE-2026-12065 (1)
- 🔗 Groww - Google Driveexploit
IV. Related Vulnerabilities
V. Comments for CVE-2026-12065
No comments yet