PT-2026-41113

CVE-2026-8584

Published

2026-05-14

Updated

2026-08-31

Description by

CVSS 3.1

4.2

Medium

MetricsAV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 148.0.7778.168

Description An inappropriate implementation in Views allows a remote attacker who has compromised the renderer process to perform UI spoofing using a crafted HTML page. UI spoofing is a technique where an attacker mimics a legitimate user interface to deceive users into performing unintended actions.

Recommendations Update Google Chrome on iOS to version 148.0.7778.168 or later.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-451: User Interface (UI) Misrepresentation of Critical Information

Related identifiers

CVE-2026-8584

BDU:2026-11199

ECHO-E313-068F-F849