CVE-2026-11232

MediumCVSS 5.4

Published: 04/06/2026(UTC)Updated: 10/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.07%

22th percentile - higher than 22% of all known CVEs

Summary

Inappropriate implementation in TabGroups in Google Chrome prior to version 149.0.7827.53 allowed a remote attacker to perform UI spoofing via malicious network traffic.

Risk Assessment

This vulnerability may lead to user deception, potentially resulting in data theft or other unauthorized actions.

Recommendation

It is recommended to update Google Chrome to the latest version to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

Inappropriate implementation in TabGroups in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium security severity: Low)