CVE-2026-14110

MediumCVSS 4.3

Published: 30/06/2026(UTC)Updated: 02/07/2026(UTC)Translated: 03/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

8th percentile — higher than 8% of all known CVEs

Summary

An inappropriate implementation in DarkMode in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. The issue is rated as Low severity by the Chromium team.

Risk Assessment

An attacker could exploit this vulnerability to display a fake interface, potentially leading to fraud or theft of user credentials.

Recommendation

Update Google Chrome to version 150.0.7871.47 or later immediately, which includes the fix.

Original NVD description (English source)

Inappropriate implementation in DarkMode in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)