UI Spoofing Vulnerability in Google Chrome for Mac
CVE-2026-8565

Currently unrated

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
14 May 2026

What is CVE-2026-8565?

A vulnerability in Google Chrome for Mac prior to version 148.0.7778.168 allows an adversary to exploit improper implementation in the Downloads feature. By persuading users to install a malicious Chrome extension, attackers can execute UI spoofing attacks, misleading users and potentially compromising sensitive information. This vulnerability underscores the importance of scrutinizing extensions and keeping software up to date to mitigate risks.

Affected Version(s)

Chrome 148.0.7778.168

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.