CVE-2026-84330: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in FullScreen in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84356: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in FullScreen in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...

Linux Distros Unpatched Vulnerability : CVE-2026-84356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in FullScreen in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium...

CVE-2026-84356

A UI misrepresentation vulnerability in Google Chrome (prior to version 152.0.7977.75) and Microsoft Edge (Chromium-based) allows a remote attacker to spoof the address bar via a crafted HTML page when in FullScreen mode. While the Chromium security severity is low, reports indicate this vulnerab...

CVE-2026-84356

UI misrepresentation in FullScreen in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...

CVE-2026-84356

UI misrepresentation in FullScreen in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...

CVE-2026-84356

UI misrepresentation in FullScreen in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...

CVE-2026-84330

UI misrepresentation in FullScreen in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84358

Improper privilege management in Downloads in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84358

Improper privilege management in Downloads within Google Chrome (prior to version 152.0.7977.75) allows a remote attacker who has compromised the renderer process to spoof the address bar using a crafted HTML page. This vulnerability also affects Microsoft Edge (Chromium-based) and Chromium brows...

CVE-2026-84330

Google Chrome on Android versions prior to 152.0.7977.75 is vulnerable to a UI misrepresentation flaw in FullScreen mode. A remote attacker can exploit this by using a crafted HTML page to spoof the address bar . This vulnerability affects Chromium-based browsers, including Microsoft Edge , which...

CVE-2026-84358

Improper privilege management in Downloads in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84330

UI misrepresentation in FullScreen in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84330

UI misrepresentation in FullScreen in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84358

Improper privilege management in Downloads in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

PT-2026-84566

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description A UI misrepresentation issue in FullScreen mode allows a remote attacker to spoof the address bar by using a specially crafted HTML page. Recommendations Update Google Chrome to version...

PT-2026-84568

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description Improper privilege management in the Downloads component allows a remote attacker who has already compromised the renderer process to spoof the address bar by using a specially crafted...

PT-2026-84551

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.75 Description A UI misrepresentation issue in FullScreen mode allows a remote attacker to spoof the address bar by using a crafted HTML page. Recommendations Update Google Chrome on Androi...

CVE-2026-81267

A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the destination origin while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 155.0...

CVE-2026-81267 Stalled popup navigation could allow address bar origin spoofing in Firefox for iOS

A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the destination origin while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 155.0...