EUVD-2026-40686
User Interface (UI) Misrepresentation of Critical Information (CWE-451)
GHSA-mx29-96xm-4q25
4.2
CVSS 3.1 · Vendor: google
Share
Severity by source
Vendor (google)
PRIMARY
4.2
MEDIUM
AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L
vuln.today
AI
3.1
LOW
Downgraded A from L to N: a UI spoofing defect in a file picker does not credibly disrupt system or application availability.
3.1 AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
4.0 AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
SUSE
MEDIUM
qualitative
Primary rating from Vendor (google).
CVSS VectorVendor: google
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
Low
Lifecycle Timeline
4
Analysis Generated
Jul 01, 2026 - 02:36 vuln.today
CVSS changed
Jul 01, 2026 - 02:22 NVD
4.2 (MEDIUM)
CVE Published
Jun 30, 2026 - 23:17 cve.org
MEDIUM 4.2
CVE Published
Jun 30, 2026 - 23:17 cve.org
UNKNOWN (no severity yet)
DescriptionCVE.org
Incorrect security UI in File Input in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
AnalysisAI
UI spoofing via the File Input security indicator in Google Chrome on macOS allows a remote attacker to misrepresent security-critical interface elements when a user visits a crafted HTML page and performs specific UI gestures. Affected are all Chrome for Mac builds prior to 150.0.7871.47. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Access
Host crafted HTML page
Delivery
Lure Mac Chrome user via phishing
Exploit
Trigger File Input UI interaction
Execution
Induce specific UI gestures
Persist
Misrepresent file-picker security UI
Impact
Deceive user into unintended file action
Access
Host crafted HTML page
Delivery
Lure Mac Chrome user via phishing
Exploit
Trigger File Input UI interaction
Execution
Induce specific UI gestures
Persist
Misrepresent file-picker security UI
Impact
Deceive user into unintended file action
Vulnerability AssessmentAI
| Exploitation | Exploitation requires three concurrent conditions: (1) the victim must be using Google Chrome on macOS specifically - the vulnerability does not affect Chrome on Windows, Linux, or mobile platforms; (2) the victim must visit an attacker-controlled or attacker-compromised HTML page; and (3) the victim must be induced to perform specific UI gesture sequences as part of a File Input interaction (AC:H reflects this requirement). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 base score of 4.2 (Medium) is consistent with the attack characteristics: AV:N places delivery over the network, but AC:H acknowledges that the attacker must orchestrate specific UI gesture sequences from the victim, which substantially reduces exploitability at scale. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker hosts a crafted HTML page that manipulates the File Input element to render a misleading security UI on macOS Chrome. The victim is lured to the page - via phishing or a compromised ad - and guided through a sequence of UI interactions (e.g., clicks or drags that appear legitimate) that the attacker has scripted to trigger the spoofed state. … |
| Remediation | Upgrade Google Chrome on macOS to version 150.0.7871.47 or later, which contains the vendor-released patch per the Chrome Stable Channel update advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Information Disclosure
View allVendor StatusVendor
SUSE
Severity: Moderate| Product | Status |
|---|---|
| SUSE Package Hub 15 SP7 | Fixed |
| openSUSE Tumbleweed | Fixed |
| SUSE Package Hub 15 SP7 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today
Destination URL
POC code from unknown sources may be malicious, contain backdoors, or be fake.
Always review and test exploit code in a safe, isolated environment (VM/sandbox).
Verify the source reputation and cross-reference with known databases (Exploit-DB, GitHub Security).