CVE-2026-45488
User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform
CVSS
5.4
Medium
EPSS
0.4%
p30
KEV
—
Exploit Today
9
0-100
Published: Jul 3, 2026 · Last modified: Jul 7, 2026 · CWE-451
0.2%EPSS · 30 days0.4%
2026-08-202026-09-17
User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-87653—8.4%
——3UI misrepresentation in FullScreen in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)9dCVE-2026-876495.4 MED6.4%
——2UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)8dCVE-2026-87635—13.2%
——4UI misrepresentation in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)9dCVE-2026-876244.2 MED3.7%
——1UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)8dCVE-2026-875974.8 MED11.2%
——3UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. (Chromium security severity: Low)8dCVE-2026-875835.4 MED6.1%
——2UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)8d