Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-87597
Medium · 4.8
CWE-451 Sep 8, 2026
UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36…
UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. (Chromium security severity: Low)
CVE-2026-87583
Medium · 5.4
CWE-451 Sep 8, 2026
UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36…
UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-87567
Medium · 4.3
CWE-451 Sep 8, 2026
UI misrepresentation in UrlFormatting in Google Chrome prior to 153.0.8010.36 allowed a…
UI misrepresentation in UrlFormatting in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted domain name. (Chromium security severity: Medium)
CVE-2026-87559
Medium · 4.2
CWE-451 Sep 8, 2026
UI misrepresentation in UI in Google Chrome prior to 153.0.8010.36 allowed a remote…
UI misrepresentation in UI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87507
Medium · 5.4
CWE-451 Sep 8, 2026
UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a…
UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87501
Medium · 5.4
CWE-451 Sep 8, 2026
UI misrepresentation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a…
UI misrepresentation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87496
Medium · 5.4
CWE-451 Sep 8, 2026
UI misrepresentation in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote…
UI misrepresentation in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87484
Medium · 5.4
CWE-451 Sep 8, 2026
UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a…
UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87462
Medium · 5.4
CWE-451 Sep 8, 2026
UI misrepresentation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote…
UI misrepresentation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87458
Medium · 5.4
CWE-451 Sep 8, 2026
UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a…
UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87445
Medium · 5.4
CWE-451 Sep 8, 2026
UI misrepresentation in Session in Google Chrome prior to 153.0.8010.36 allowed a remote…
UI misrepresentation in Session in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-86853
Medium · 4.3
CWE-451 Sep 8, 2026
Repeated external URL scheme launches could potentially cause a denial of service in Firefox for iOS
A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or external application launches. This could make Firefox for iOS temporarily unusable until the page is closed. This vulnerability was fixed in Firefox for iOS 155.1.
CVE-2025-52652
Low · 3.5
CWE-451 Sep 7, 2026
HCL MyXalytics is affected by multiple security vulnerabilities.
HCL MyXalytics was affected by Content Spoofing Vulnerability. It may allow an attacker to manipulate displayed content, making it appear as though it originates from a trusted source, potentially leading to phishing or data theft.
CVE-2026-63020
Low · 3.1
CWE-451 Sep 2, 2026
BIG-IP Configuration utility vulnerability
A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages
Impact:
An attacker may trick authenticated BIG-IP users
into accessing malicious links and reflect a spoofed error message in
the victim's BIG-IP Configuration utility web browser session. This is a
control plane issue; there is no data plane exposure.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2026-84356
Medium · 4.3
CWE-451 Sep 1, 2026
UI misrepresentation in FullScreen in Google Chrome prior to 152.0.7977.75 allowed a…
UI misrepresentation in FullScreen in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-84330
Medium · 5.4
CWE-451 Sep 1, 2026
UI misrepresentation in FullScreen in Google Chrome on on Android prior to 152.0.7977.75…
UI misrepresentation in FullScreen in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-81267
Medium · 5.4
CWE-451 Aug 31, 2026
Stalled popup navigation could allow address bar origin spoofing in Firefox for iOS
A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the destination origin while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 155.0.
CVE-2026-79284
Medium · 4.3
CWE-451 Aug 25, 2026
UI misrepresentation in Core in Google Chrome on on Mac prior to 152.0.7977.65 allowed a…
UI misrepresentation in Core in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-79283
Medium · 5.4
CWE-451 Aug 25, 2026
UI misrepresentation in Geometry in Google Chrome prior to 152.0.7977.65 allowed a…
UI misrepresentation in Geometry in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79250
Medium · 5.4
CWE-451 Aug 25, 2026
UI misrepresentation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a…
UI misrepresentation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79233
Medium · 4.3
CWE-451 Aug 25, 2026
UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65…
UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-79204
Medium · 5.4
CWE-451 Aug 25, 2026
UI misrepresentation in Input in Google Chrome on on Mac prior to 152.0.7977.65 allowed…
UI misrepresentation in Input in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79180
Medium · 5.4
CWE-451 Aug 25, 2026
UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65…
UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79176
Medium · 6.5
CWE-451 Aug 25, 2026
UI misrepresentation in Extensions in Google Chrome prior to 152.0.7977.65 allowed a…
UI misrepresentation in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Medium)
CVE-2026-79173
Medium · 5.4
CWE-451 Aug 25, 2026
UI misrepresentation in WebAppInstalls in Google Chrome prior to 152.0.7977.65 allowed a…
UI misrepresentation in WebAppInstalls in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)