Google Chrome UI Spoofing Vulnerability on Android

A UI spoofing vulnerability has been identified in Google Chrome for Android, affecting versions prior to 134.0.6998.35. This vulnerability allows remote attackers to manipulate the user interface by using a specially crafted HTML page. The issue arises from an inappropriate implementation in the browser's user interface handling.

Impact

Exploitation of this vulnerability allows web content to interfere with the browser's trusted user interface, potentially leading to user manipulation.

Reproduction

The vulnerability can be reproduced by opening the affected version of Google Chrome on an Android device, navigating to a crafted HTML page that exploits this vulnerability, and tapping on the page. This action triggers the text selection menu, which can overlap the URL bar, demonstrating the UI spoofing effect.

Remediation

Users can update to Google Chrome version 134.0.6998.35 or later to address this vulnerability.