EUVD-2026-40680
GHSA-c5wm-vqw7-8pv3
Severity by source
AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L
Network-delivered with no authentication needed, but AC:H due to required gesture sequence; UI spoofing yields limited integrity impact only, with no plausible availability impact for this class of flaw.
Primary rating from Vendor (google).
CVSS VectorVendor: google
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L
Lifecycle Timeline
4DescriptionCVE.org
Inappropriate implementation in UI in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
AnalysisAI
UI spoofing in Google Chrome on macOS prior to version 150.0.7871.47 allows a remote attacker to misrepresent browser UI elements by convincing a user to perform specific UI gestures on a crafted HTML page. Rooted in CWE-451 (UI Misrepresentation of Critical Information), the flaw can cause security-sensitive browser chrome - such as origin indicators or permission prompts - to display falsified content, potentially deceiving users into unsafe actions. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires all of the following: the target must be running Google Chrome on macOS (not Windows or Linux) at a version below 150.0.7871.47; the target must navigate to an attacker-controlled crafted HTML page; and the target must perform specific UI gestures while on that page - both steps are mandatory and reflect the AC:H and UI:R CVSS metrics. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The NVD CVSS base score of 4.2 (Medium) captures several compounding mitigations: AC:H indicates the attack cannot be reliably automated and requires specific conditions to trigger; UI:R confirms mandatory user interaction; and the impact is bounded to I:L and A:L with no confidentiality loss (C:N). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker hosts a crafted HTML page and uses phishing or social engineering to direct a macOS Chrome user to it. Once the user is on the page, the attacker's content prompts or tricks the user into performing specific UI gestures (such as targeted clicks or drag interactions), which triggers the inappropriate UI implementation and causes browser-level UI elements - such as the address bar or a security prompt - to display spoofed content, potentially convincing the user that a malicious origin is trusted or that a permission was not granted when it was. … |
| Remediation | Update Google Chrome on macOS to version 150.0.7871.47 or later, which is the vendor-released patch confirmed by the stable channel advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Information Disclosure
View allVendor StatusVendor
SUSE
Severity: Moderate| Product | Status |
|---|---|
| SUSE Package Hub 15 SP7 | Fixed |
| openSUSE Tumbleweed | Fixed |
| SUSE Package Hub 15 SP7 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today