UI Spoofing Vulnerability in Google Chrome by Google
CVE-2026-106380

Currently unrated

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
6 October 2026

What is CVE-2026-106380?

A UI misrepresentation vulnerability in Google Chrome prior to version 155.0.8059.39 enables remote attackers to leverage social engineering tactics to spoof user interface elements through specially crafted HTML pages. This flaw poses a risk of deceiving users into interacting with false interface components, potentially leading to unauthorized actions or disclosure of sensitive information.

Affected Version(s)

Chrome 155.0.8059.39

References

https://chromereleases.googleblog.com/2026/10/stable-chan...
https://issues.chromium.org/issues/553168380

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.