Volerion logoVolerion
Volerion logoVolerion

Google Chrome Picture In Picture UI Spoofing Vulnerability

Vulnerability

A UI spoofing vulnerability has been identified in Google Chrome, specifically in the Picture In Picture feature, prior to version 139.0.7258.66. This vulnerability allows remote attackers to manipulate user interface elements by convincing users to perform certain gestures on a crafted HTML page.

Impact

Exploitation of this vulnerability could lead to UI spoofing, where an attacker can create a misleading interface that appears legitimate, potentially tricking users into taking unintended actions.

Remediation

Users can update to Google Chrome version 139.0.7258.66 or later to address this vulnerability.

Added: Aug 7, 2025, 2:24 AM
Updated: Aug 7, 2025, 2:24 AM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
0.6
exploitability
4.2
remediation
7.7
relevance
0.3
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.