Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Google Chrome extensions can display fake user interface elements

CVE-2026-121190 · published 1 day ago
Summary

If a user installs a malicious Chrome extension, an attacker can make parts of the browser look like legitimate buttons or warnings, tricking the user into clicking them. This could lead to unintended actions or disclosure of information. Update Chrome to version 157.0.8103.38 or later, and only install extensions from trusted sources.

What to do
  • Update google chrome to version 157.0.8103.38 or later.
Affected software
Ecosystem VendorProductAffected versions
Debian:12 debian chromium All versions
– google chrome < 157.0.8103.38
Original advisory text
UI misrepresentation in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. (Chromium sec...
UI misrepresentation in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. (Chromium security severity: Low)
References
Exploitation
<1% chance of attack within 30 days
Type
CWE-451User Interface (UI) Misrepresentation of Critical Information
Timeline
Published3 Nov 2026
Updated4 Nov 2026
First seen3 Nov 2026
Sources
CVE-2026-121190 · NVD
CVE-2026-121190 · MITRE
DEBIAN-CVE-2026-121190 · OSV
Track software like this
Free during beta