CVE-2026-0906

Publication date

2026-01-20 04:14:17

Family

Chrome

State

PUBLISHED

Description

Incorrect security UI in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low)