UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. (CVE-2026-78912)

CVE-2026-78912 describes a UI misrepresentation vulnerability in the Browser component of Google Chrome before version 152.0.7977.65. An attacker can exploit this by delivering a crafted HTML page that spoofs UI elements, potentially misleading users. The issue is classified under CWE-451 (User Interface Misrepresentation). The CVSS 3.1 base score is 5.4, reflecting a network attack vector with low complexity, no privileges required, user interaction needed, and limited confidentiality and availability impact.

The vulnerability allows remote attackers to spoof UI elements, which may deceive users into performing unintended actions. The impact is limited to partial confidentiality loss and minor availability impact. There is no indication of integrity compromise. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor for updates from Google Chrome and apply any forthcoming security updates promptly.