CVE details

CVE-2026-0907

Incorrect security UI in Split View in Google Chrome prior to 144.

• Severity: Critical
• CVSS: 9.8
• Published: 2026-01-20
• Fixed in: 144.0.7559.59

Description

Incorrect security UI in Split View in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

Affected products

• Google Chrome · → 144.0.7559.59
• Google Chrome · → 144.0.7559.60

Overlaps: Google Chrome

Source

View on NVD

Check if your browser is affected