Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.6
CVE-2026-113171: Google Chrome Android may display fake prompts
CVE-2026-113171 · published 15 days ago
Summary
Versions of Google Chrome on Android before 156.0.8078.47 could be tricked by another app to show false warning or permission dialogs. This could lead users to approve actions they did not intend. Updating Chrome to the latest version eliminates the risk.
What to do
- Update debian chromium to version 156.0.8078.47-1~deb12u1.
- Update debian chromium to version 156.0.8078.47-1~deb13u1.
- Update debian chromium to version 156.0.8078.47-1.
- Update google chrome to version 156.0.8078.47 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | chrome | < 156.0.8078.47 | |
| Debian:12 | debian | chromium |
< 156.0.8078.47-1~deb12u1 Fix: upgrade to 156.0.8078.47-1~deb12u1
|
| Debian:13 | debian | chromium |
< 156.0.8078.47-1~deb13u1 Fix: upgrade to 156.0.8078.47-1~deb13u1
|
| Debian:14 | debian | chromium |
< 156.0.8078.47-1 Fix: upgrade to 156.0.8078.47-1
|
Original advisory text
UI misrepresentation in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a local attacker leveraging social engineering to spoof UI elements via a co-installed app. (Chromium s...
UI misrepresentation in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a local attacker leveraging social engineering to spoof UI elements via a co-installed app. (Chromium security severity: Medium)
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Severity
9.6
Critical
Type
CWE-119Buffer Overflow
CWE-451User Interface (UI) Misrepresentation of Critical Information
Timeline
Published20 Oct 2026
Updated4 Nov 2026
First seen20 Oct 2026
Track software like this
Free during beta