CVE-2026-55257
High · 8.4CVSS
8.4
EPSS
0.1%
Published
Nov 2, 2026
CISA due date
—
The record
In UsbDialogHelper of UsbDialogHelper.java, there is a possible UI confusion due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-121244 UI misrepresentation in FileAPI in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-451
- CVE-2026-121216 UI misrepresentation in UI in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-451
- CVE-2026-121215 UI misrepresentation in Bluetooth in Google Chrome prior to 157.0.8103.38 allowed a… CWE-451
- CVE-2026-121209 UI misrepresentation in Input in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-451
- CVE-2026-121206 UI misrepresentation in Isolated in Google Chrome prior to 157.0.8103.38 allowed a remote… CWE-451
- CVE-2026-121190 UI misrepresentation in Extensions in Google Chrome prior to 157.0.8103.38 allowed a… CWE-451
- CVE-2026-121186 UI misrepresentation in Passwords in Google Chrome on on iOS prior to 157.0.8103.38… CWE-451
- CVE-2026-121177 UI misrepresentation in PageInfo in Google Chrome on on iOS prior to 157.0.8103.38… CWE-451