CyberRota Analysis
AI-GeneratedA UI misrepresentation vulnerability in the FullScreen feature of Google Chrome prior to version 152.0.7977.75 allows remote attackers to spoof the address bar through a specially crafted HTML page. This could potentially mislead users into believing they are interacting with a legitimate site, posing a risk of phishing attacks. Organizations that rely on Chrome for web access, particularly those handling sensitive information, should prioritize updating to the latest version to mitigate this risk.
CVE
CVE-2026-84356
Severity
MEDIUM
CVSS
4.3
EPSS
0.15%
Chrome
Original NVD Description
UI misrepresentation in FullScreen in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low)
Related CVEs
Other vulnerabilities affecting the same vendor(s)