PULSE
ESPT
FEED
ransomsilentransomgroup reclama a B... W...ransompixelleaks reclama a Published · Technologyransomglobal secret group reclama a Ornico · ZA · Professional Servicesransomglobal secret group reclama a Heartland Honda · US · Retail & E-Commerceransomeclipse reclama a La'ala Al Kuwait Real Estate Co KSCC · KW · Retail & E-Commerceransomrhysida reclama a M.C.S. Steel Public Company Limited · TH · Manufacturingransomhyflock reclama a Cameroon government troops leaked · CM · Government & Defenseransombyod reclama a Texas HHSC · US · Government & Defenseransombyod reclama a Vanderbilt EDU · US · Educationransomeverstake reclama a carrollins.com · US · Retail & E-Commerceransomaurora reclama a Johnson Development Corp. · Otherransomn0n reclama a Company #211 · USransomn0n reclama a Company #210 · USransomn0n reclama a Company #209 · USransomsilentransomgroup reclama a B... W...ransompixelleaks reclama a Published · Technologyransomglobal secret group reclama a Ornico · ZA · Professional Servicesransomglobal secret group reclama a Heartland Honda · US · Retail & E-Commerceransomeclipse reclama a La'ala Al Kuwait Real Estate Co KSCC · KW · Retail & E-Commerceransomrhysida reclama a M.C.S. Steel Public Company Limited · TH · Manufacturingransomhyflock reclama a Cameroon government troops leaked · CM · Government & Defenseransombyod reclama a Texas HHSC · US · Government & Defenseransombyod reclama a Vanderbilt EDU · US · Educationransomeverstake reclama a carrollins.com · US · Retail & E-Commerceransomaurora reclama a Johnson Development Corp. · Otherransomn0n reclama a Company #211 · USransomn0n reclama a Company #210 · USransomn0n reclama a Company #209 · US
← All CVEs
CVE WatchOct 25, 2026

CVE-2026-8584

Inappropriate implementation in Views in Google Chrome on iOS prior to 148.0.7778.168 allowed a remote attacker who had compromised the rend

CVSS

4.2

Medium

EPSS

0.1%

p3

KEV

—

Exploit Today

1

0-100

Published: May 14, 2026 · Last modified: Oct 25, 2026 · CWE-451

EPSS · 30d
0.1%EPSS · 30 days0.2%
2026-10-122026-11-09
Technical description

Inappropriate implementation in Views in Google Chrome on iOS prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

Official references
Related CVEs
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-1239954.6 MED
2.8%
——1Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an input validation vulnerability in the UPnP/DLNA AVTransport SOAP service that allows a LAN-adjacent attacker to inject arbitrary URIs via the CurrentURI field of SetAVTransportURI without validating the scheme, host, or media legitimacy. Attackers can supply schemes such as http://, file:///data/misc/wifi/, rtsp://, or smb:// to have the TV fetch and render attacker-controlled content after a one-time DLNA pairing, enabling phishing pages, fake firmware prompts, and fake emergency alerts to be displayed, with subsequent commands executing silently.3dCVE-2026-1212445.4 MED
9.6%
——3UI misrepresentation in FileAPI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)4dCVE-2026-1212165.4 MED
9.6%
——3UI misrepresentation in UI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)4dCVE-2026-1212155.4 MED
9.1%
——3UI misrepresentation in Bluetooth in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)4dCVE-2026-121209—
8.1%
——2UI misrepresentation in Input in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low)6dCVE-2026-1212065.4 MED
9.6%
——3UI misrepresentation in Isolated in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)4d