CVE-2026-9110

MediumCVSS 4.2

Published: 20/05/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.34%

26th percentile - higher than 26% of all known CVEs

Summary

Google Chrome on Windows prior to version 148.0.7778.179 has an inappropriate UI implementation allowing a remote attacker to perform UI spoofing via a crafted HTML page.

Risk Assessment

An attacker who compromised the renderer process can spoof the UI, potentially leading to data theft or other social engineering attacks.

Recommendation

Update Google Chrome to version 148.0.7778.179 or later.

Original NVD description (English source)

Inappropriate implementation in UI in Google Chrome on Windows prior to 148.0.7778.179 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Critical)