UI Spoofing Vulnerability in Google Chrome on iOS
CVE-2026-8584

Currently unrated

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
14 May 2026

What is CVE-2026-8584?

A vulnerability in Google Chrome for iOS prior to version 148.0.7778.168 allows attackers to manipulate the user interface through specially crafted HTML pages. This issue occurs due to an inappropriate implementation in the Views component, which can be exploited by a malicious renderer process, enabling the attacker to create misleading experiences for the user.

Affected Version(s)

Chrome 148.0.7778.168

References

https://chromereleases.googleblog.com/2026/05/stable-chan...
https://issues.chromium.org/issues/498892595

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.