CVE-2026-87624
UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
Scoring
- Severity
- MEDIUM
- CVSS base score
- 4.2
- CVSS vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
- EPSS probability
- 0.16%
- CWE
- CWE-451
- Published
- 2026-09-09
- Last modified
- 2026-09-09
Affected products
- Google Chrome
Weakness type
Related vulnerabilities
- CVE-2026-87583 — UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a...
- CVE-2026-87597 — UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a...
- CVE-2026-87653 — UI misrepresentation in FullScreen in Google Chrome on on Windows prior to 153.0.8010.36 allowed a...
- CVE-2026-87635 — UI misrepresentation in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker...
- CVE-2026-87484 — UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker...
- CVE-2026-87458 — UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker...
- CVE-2026-87496 — UI misrepresentation in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker...
- CVE-2026-87567 — UI misrepresentation in UrlFormatting in Google Chrome prior to 153.0.8010.36 allowed a remote...