CVE-2026-11001
EUVD-2026-3445004.06.2026, 23:17
Inappropriate implementation in Payments in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| chrome | 𝑥 < 149.0.7827.53 |
𝑥
= Vulnerable software versions
Debian Releases
Common Weakness Enumeration
- CWE-290 - Authentication Bypass by SpoofingThis attack-focused weakness is caused by improperly implemented authentication schemes that are subject to spoofing attacks.
- CWE-451 - User Interface (UI) Misrepresentation of Critical InformationThe user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.