CVE-2026-13956
MediumCVSS 4.2Exploitation Probability (EPSS)
Low risk8th percentile — higher than 8% of all known CVEs
Summary
An incorrect security UI in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page.
Risk Assessment
The risk involves the possibility of tricking the user into believing false information about the page, potentially leading to data theft or malware installation.
Recommendation
It is recommended to immediately update Google Chrome to version 150.0.7871.47 or later, which fixes this vulnerability.
Original NVD description (English source)
Incorrect security UI in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)