PT-2026-24884

CVE-2026-3937

·

Published

2026-01-03

·

Updated

2026-08-31

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.71
Description An incorrect security user interface in the Downloads feature of Google Chrome on Android allowed a remote attacker to perform UI spoofing through a crafted HTML page. This issue has a Chromium security severity rating of Low.
Recommendations Update Google Chrome to version 146.0.7680.71 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-20: Improper Input Validation
CWE-451: User Interface (UI) Misrepresentation of Critical Information
Related identifiers
CVE-2026-3937
BDU:2026-05755
OPENSUSE-SU-2026:10376-1
OPENSUSE-SU-2026:20372-1
OPENSUSE-SU-2026:20460-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com