CVE Catalog
CVE-2026-0907
CriticalSummary
Incorrect security UI in Split View in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
Risk Assessment
An attacker can trick the user by displaying fake UI elements, potentially leading to disclosure of sensitive information or unintended actions.
Recommendation
Update Google Chrome to version 144.0.7559.59 or later to mitigate the vulnerability.
Original NVD description (English source)
Incorrect security UI in Split View in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)