PT-2026-66328 · Google · Google Chrome

CVE-2026-18009

·

Published

2026-07-30

·

Updated

2026-08-02

CVSS v3.1

4.3

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72
Description Insufficient validation of untrusted input in the passwords component allows a remote attacker to perform UI spoofing via malicious network traffic. UI spoofing is a technique where an attacker mimics a legitimate user interface to deceive users into performing unintended actions.
Recommendations Update Google Chrome to version 151.0.7922.72 or later.

Fix

RCE

UI Misrepresentation of Critical Information

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-18009
ECHO-1B54-2DFC-5919
OPENSUSE-SU-2026:11434-1
OPENSUSE-SU-2026:21514-1

Affected Products

Google Chrome