Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
4.2
CVE-2026-13857: Google Chrome UI Spoofing via Malicious Webpage
CVE-2026-13857 · published 4 months ago
Summary
Google Chrome users may be tricked into performing certain actions on their browser by a malicious webpage. This could potentially lead to users revealing sensitive information or downloading malicious software. To fix this issue, update Google Chrome to version 150.0.7871.47 or later.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:14 | debian | chromium | All versions |
| Debian:11 | debian | chromium | All versions |
| Debian:12 | debian | chromium | All versions |
| Debian:13 | debian | chromium | All versions |
Original advisory text
Inappropriate implementation in Geometry in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafte...
Inappropriate implementation in Geometry in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-451User Interface (UI) Misrepresentation of Critical Information
Timeline
Published30 Jun 2026
Updated29 Oct 2026
First seen1 Jul 2026
Track software like this
Free during beta