CVE WatchJul 22, 2026

CVE-2026-10984

Inappropriate implementation in Accessibility in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform UI spo

CVSS

5.4

Medium

EPSS

0.2%

p14

KEV

—

Exploit Today

0-100

Published: Jun 4, 2026 · Last modified: Jul 22, 2026 · CWE-451

EPSS · 30d

0.2%EPSS · 30 days0.2%

2026-07-282026-08-24

Technical description

Inappropriate implementation in Accessibility in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: High)

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-749755.4 MED

6.6%

——2Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.19h CVE-2026-186224.7 MED

2.2%

——1Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified, including alterations to appearance, coordinates, or field duplication. This may mislead users into trusting tampered documents, since the UI cannot accurately reflect the actual integrity status of signatures.13d CVE-2026-184875.4 MED

23.6%

——7A flaw was found in Epiphany. An issue in how the browser reads web addresses allows attackers to fake the domain name shown in the address bar. If a user clicks a specially crafted link containing a colon (for example, [https://trusted.com:80@attacker.com/](https://trusted.com:80@attacker.com/)), the address bar and security menus will display the safe website (trusted.com) but it will actually load the attacker website (attacker.com) on the screen. This allows attackers to create convincing phishing pages to trick users into trusting a malicious site.19d CVE-2026-180184.0 MED

0.3%

——0Inappropriate implementation in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform UI spoofing via a malicious file. (Chromium security severity: Low)22d CVE-2026-180134.3 MED

4.8%

——1Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)23d CVE-2026-180104.3 MED

3.8%

——1Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium security severity: Low)23d