Domain Spoofing Vulnerability in Google Chrome on Android

CVE-2026-14141

What is CVE-2026-14141?

A security vulnerability in Google Chrome for Android prior to version 150.0.7871.47 enables remote attackers to exploit improper security UI implementations. By crafting a malicious HTML page, an attacker can manipulate the user interface to perform domain spoofing, posing a significant risk to user security and privacy. This flaw highlights the importance of keeping web browsers updated to mitigate potential exploits.

References