Incorrect security UI in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low)
Advisories
Source ID Title
Debian DSA Debian DSA DSA-6100-1 chromium security update
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Tue, 20 Jan 2026 04:30:00 +0000

Type Values Removed Values Added
Description Incorrect security UI in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low)
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-01-20T04:14:17.058Z

Reserved: 2026-01-13T18:20:17.974Z

Link: CVE-2026-0906

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-01-20T05:16:16.110

Modified: 2026-01-20T05:16:16.110

Link: CVE-2026-0906

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.