CVE-2026-18018 is a vulnerability in the Updater implementation of Google Chrome on Windows platforms before version 151.0.7922.72. This flaw permits a local attacker to conduct UI spoofing attacks by leveraging a malicious file. The vulnerability is considered low severity by the Chromium security team. There is no CVSS score provided, and no explicit remediation level or patch availability is stated in the provided data. The vendor advisory link is available but does not explicitly confirm patch status in the input data.

The vulnerability enables local attackers to perform UI spoofing, which may mislead users by displaying deceptive user interface elements. This could potentially be used to trick users into performing unintended actions. However, the impact is limited to UI spoofing and is rated low severity by the vendor.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Until confirmation, users should ensure they update to the latest Chrome version beyond 151.0.7922.72 when available to mitigate this issue.