CVE details

CVE-2026-0906

Incorrect security UI in Google Chrome on Android prior to 144.

• Severity: Critical
• CVSS: 9.8
• Published: 2026-01-20
• Fixed in: 144.0.7559.59

Description

Incorrect security UI in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low)

Affected products

• Google Chrome · → 144.0.7559.59
• Google Chrome · → 144.0.7559.60

Overlaps: Google Chrome

Source

View on NVD

Check if your browser is affected