PT-2026-54274

CVE-2026-13998

Published

2026-05-17

Updated

2026-09-10

Description by

CVSS 3.1

4.2

Medium

MetricsAV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Google Chrome on Mac versions prior to 150.0.7871.47

Description An issue in the File Input security UI allows a remote attacker to perform UI spoofing via a crafted HTML page. This occurs when a user is convinced to perform specific UI gestures, potentially misleading them about the interface's authenticity.

Recommendations Update Google Chrome on Mac to version 150.0.7871.47 or later.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-451: User Interface (UI) Misrepresentation of Critical Information

Related identifiers

CVE-2026-13998

BDU:2026-18002

ECHO-B445-063D-9556