Google Chrome Storage Race Condition Vulnerability Allowing UI Spoofing

Vulnerability

A race condition vulnerability has been identified in the Storage component of Google Chrome on Windows, affecting versions prior to 142.0.7444.59. This vulnerability allows remote attackers to perform UI spoofing by convincing users to engage in specific UI gestures on a crafted HTML page.

Impact

Exploitation of this vulnerability could lead to UI spoofing, allowing an attacker to manipulate how content is presented to the user.

Remediation

Users can update to Google Chrome version 142.0.7444.59 or later to address this vulnerability.

Added: Nov 10, 2025, 8:37 PM
Updated: Nov 10, 2025, 9:25 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
0.6
exploitability
4.0
remediation
7.7
relevance
0.9
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.