PT-2026-106857

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description UI misrepresentation in Paint allows a remote attacker to spoof UI elements through the use of a crafted HTML page. Recommendations Update Google Chrome to version 155.0.8059.39 or late...

PT-2026-106989

UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. Chromium security severity: Low...

CVE-2026-106236: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. Chromium security severity: Low...

CVE-2026-106272: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially spoof UI elements via crafted network traffic. Chromium security severity: Low...

PT-2026-106905

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description UI misrepresentation in the Browser allows a remote attacker to spoof UI elements through a crafted HTML page by leveraging social engineering. Recommendations Update Google Chrome to...

CVE-2026-106276: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106285: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

UI misrepresentation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leverage social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Shadow

In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn change finger. Although it is not possible to exploit this directly for example, adding a new user fails because \n is in the block list, it is possible to misrepresent the /etc/passwd file...

Astra Linux – Vulnerability in Chromium

UI misrepresentation in the Linux Toolkit Theming in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leverage social engineering to bypass system access restrictions through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

UI misrepresentation in URL formatting in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leverage social engineering to spoof the address bar via a crafted domain name. Chromium security severity: Medium...

Fedora 44 : chromium (2026-35b989661c)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-35b989661c advisory. Update to 154.0.8037.92 CVE-2026-102299: Type confusion in V8 CVE-2026-102300: Uninitialized resource in WebGPU CVE-2026-102301: Out of bounds write...

CVE-2026-95363

An ui misrepresentation flaw was found in the FileSystem component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/522344883...

CVE-2026-95321

An ui misrepresentation flaw was found in the Payments component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/545879261...

CVE-2026-95346

An ui misrepresentation flaw was found in the Chromoting component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/514059630...

CVE-2026-105043: User Interface (UI) Misrepresentation of Critical Information

MathWorks Simulink before R2026b, when showing a crafted .slx file, can have blocks that are never visible in the Simulink Editor but will cause code execution...

CVE-2026-95279

An ui misrepresentation flaw was found in the Omnibox component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/514012689...

CVE-2026-102314

An ui misrepresentation flaw was found in the TabStrip component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514059780 https://code.google.com/p/chromium/issues/detail?id=102314...

CVE-2026-102305

An ui misrepresentation flaw was found in the SignIn component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=533021953 https://code.google.com/p/chromium/issues/detail?id=102305...

CVE-2026-102312

An ui misrepresentation flaw was found in the Omnibox component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=551668264 https://code.google.com/p/chromium/issues/detail?id=102312...