UI Spoofing Vulnerability in Google Chrome
CVE-2026-106320

Currently unrated

Key Information:

Vendor: Google
Status: Chrome
Vendor: CVE Published:; 6 October 2026

What is CVE-2026-106320?

A vulnerability in Google Chrome allows a remote attacker to spoof user interface elements by exploiting the renderer process through a specially crafted HTML page. This affects versions of Chrome prior to 155.0.8059.39, posing potential risks to users who might be led to interact with deceptive UI components.

Affected Version(s)

Chrome 155.0.8059.39

References

https://chromereleases.googleblog.com/2026/10/stable-chan...

https://issues.chromium.org/issues/553929758

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 6, 2026
Vulnerability Reserved
Oct 6, 2026

CVE-2026-106320 Data

JSON