CVE-2026-79250: UI misrepresentation in Google Chrome

CVE-2026-79250 is a vulnerability in Google Chrome's navigation UI that allows remote attackers to spoof the address bar by using a crafted HTML page. This UI misrepresentation could deceive users into believing they are on a legitimate site when they are not. The issue affects versions of Chrome before 152.0.7977.65. The vulnerability has been assigned a medium severity level by Chromium security with a CVSS v3.1 score of 5.4, indicating a network attack vector with low complexity and requiring user interaction, resulting in limited confidentiality impact and low availability impact.

The vulnerability allows remote attackers to spoof the address bar, potentially misleading users about the authenticity of the website they are visiting. This could facilitate phishing or social engineering attacks by making malicious sites appear legitimate. However, the impact is limited to UI misrepresentation without direct compromise of data confidentiality or integrity.

A fix for this vulnerability is available in Google Chrome version 152.0.7977.65. Users and administrators should update to this version or later to remediate the issue. The vendor advisory from Google confirms the availability of this update. No additional mitigation steps are indicated.