UI Spoofing Vulnerability in Google Chrome
CVE-2026-2316

6.5MEDIUM

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
11 February 2026

What is CVE-2026-2316?

A vulnerability in Google Chrome prior to version 145.0.7632.45 allows remote attackers to conduct UI spoofing through crafted HTML pages. This weakness arises from insufficient policy enforcement in Frames, enabling attackers to mislead users by displaying deceptive user interfaces. This could result in unintended data exposure or manipulation if users interact with the spoofed interface. It is crucial for users to update to the latest version to mitigate this risk.

Affected Version(s)

Chrome 145.0.7632.45

References

https://chromereleases.googleblog.com/2026/02/stable-chan...
https://issues.chromium.org/issues/422531206

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.