CVE Catalog
CVE-2026-0906
CriticalSummary
Incorrect security UI in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low)
Risk Assessment
An attacker can spoof the URL bar, potentially leading to phishing or misleading the user about the visited site.
Recommendation
Update Google Chrome on Android to version 144.0.7559.59 or later.
Original NVD description (English source)
Incorrect security UI in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low)