UI Spoofing Vulnerability in Google Chrome on Android

CVE-2025-12728

What is CVE-2025-12728?

A vulnerability has been identified in Google Chrome for Android prior to version 142.0.7444.137 that enables remote attackers to exploit the Omnibox, allowing them to perform UI spoofing. This is executed through the manipulation of specific user interface gestures, which can be triggered by misleading HTML pages. Users should remain vigilant against such attacks and ensure their browser is updated to the latest version to mitigate these risks.

References