CVE-2026-113079
High · 8.8CVSS
8.8
EPSS
0.3%
Published
Oct 20, 2026
CISA due date
—
The record
UI misrepresentation in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. (Chromium security severity: Low)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-121244 UI misrepresentation in FileAPI in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-451
- CVE-2026-121216 UI misrepresentation in UI in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-451
- CVE-2026-121215 UI misrepresentation in Bluetooth in Google Chrome prior to 157.0.8103.38 allowed a… CWE-451
- CVE-2026-121209 UI misrepresentation in Input in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-451
- CVE-2026-121206 UI misrepresentation in Isolated in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-451
- CVE-2026-121190 UI misrepresentation in Extensions in Google Chrome prior to 157.0.8103.38 allowed a… CWE-451
- CVE-2026-121186 UI misrepresentation in Passwords in Google Chrome on on iOS prior to 157.0.8103.38… CWE-451
- CVE-2026-121177 UI misrepresentation in PageInfo in Google Chrome on on iOS prior to 157.0.8103.38… CWE-451