UI misrepresentation in Input in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML… (CVE-2026-79204)

CVE-2026-79204 is a vulnerability in Google Chrome on Mac platforms where the Input UI can be misrepresented. This allows a remote attacker to create a crafted HTML page that spoofs UI elements, potentially misleading users. The issue is classified under CWE-451 (XML External Entity Injection or UI misrepresentation). The CVSS 3.1 base score is 5.4, indicating moderate severity, with attack vector network, low attack complexity, no privileges required, user interaction required, unchanged scope, low confidentiality impact, no integrity impact, and low availability impact.

The vulnerability enables remote attackers to spoof UI elements in Google Chrome on Mac, which could deceive users into interacting with malicious or misleading interface components. The impact is limited to confidentiality and availability with low severity, and no integrity impact is noted. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users and administrators should monitor official Google Chrome security advisories for updates and apply the update to version 152.0.7977.65 or later once available to remediate this issue.