CyberRota Analysis
AI-GeneratedA vulnerability in Google Chrome prior to version 151.0.7922.72 allows remote attackers to exploit insufficient validation of untrusted input in the Passwords feature, enabling UI spoofing through malicious network traffic. This could lead to users being misled into providing sensitive information. Organizations using affected versions of Chrome should prioritize updating to mitigate the risk of user credential theft.
CVE
CVE-2026-18009
Severity
MEDIUM
CVSS
4.3
EPSS
0.14%
Chrome
Original NVD Description
Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium security severity: Low)
Related CVEs
Other vulnerabilities affecting the same vendor(s)