CVE-2026-79108
UI misrepresentation in Web Authentication (Passkeys & Security Keys) in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
Scoring
- Severity
- MEDIUM
- CVSS base score
- 6.5
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- EPSS probability
- 0.25%
- CWE
- CWE-451
- Published
- 2026-08-25
- Last modified
- 2026-08-27
Affected products
- Google Chrome
Weakness type
Related vulnerabilities
- CVE-2026-87583 — UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a...
- CVE-2026-87624 — UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a...
- CVE-2026-87597 — UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a...
- CVE-2026-87653 — UI misrepresentation in FullScreen in Google Chrome on on Windows prior to 153.0.8010.36 allowed a...
- CVE-2026-87635 — UI misrepresentation in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker...
- CVE-2026-87484 — UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker...
- CVE-2026-87458 — UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker...
- CVE-2026-87496 — UI misrepresentation in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker...