CVE-2026-18010 describes a vulnerability in Google Chrome's password management prior to version 151.0.7922.72. The flaw allows a remote attacker to conduct UI spoofing attacks by leveraging malicious network traffic. This could potentially mislead users by displaying deceptive user interface elements. The vulnerability is rated as low severity by the Chromium security team. No CVSS score is provided, and no known exploits in the wild have been reported. The vendor advisory linked corresponds to a stable channel update addressing this issue.

The vulnerability enables remote attackers to perform UI spoofing, which may trick users into interacting with deceptive interface elements. This could lead to user confusion or inadvertent disclosure of sensitive information. However, the impact is considered low severity, indicating limited risk or difficulty in exploitation.

A fix is available in Google Chrome version 151.0.7922.72. Users and administrators should update to this version or later to remediate the vulnerability. Since this is not a cloud service, remediation requires updating the affected Chrome installations. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for detailed update instructions.