CVE-2026-14129
MediumCVSS 4.2Exploitation Probability (EPSS)
Low risk5th percentile — higher than 5% of all known CVEs
Summary
In Google Chrome on Android prior to version 150.0.7871.47, an inappropriate implementation in PreviewTab allowed a remote attacker, by convincing a user to perform specific UI gestures, to perform UI spoofing via a crafted HTML page.
Risk Assessment
The risk involves potential user deception through a spoofed interface, which could lead to disclosure of sensitive information or unintended actions. The vulnerability is rated as Low severity by Chromium.
Recommendation
It is recommended to immediately update Google Chrome on Android to version 150.0.7871.47 or later. Users should be advised not to click on suspicious links or perform unusual gestures on HTML pages.
Original NVD description (English source)
Inappropriate implementation in PreviewTab in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)