Google Chrome DevTools UI Spoofing Vulnerability via Malicious Extension

Vulnerability

A vulnerability in the DevTools component of Google Chrome, in versions prior to 148.0.7778.96, allowed for UI spoofing. This issue could be exploited by an attacker who convinced a user to install a malicious Chrome extension.

Impact

Exploitation of this vulnerability could lead to unauthorized UI manipulation, potentially causing users to be misled or to interact with the browser in unintended ways.

Remediation

Users can update to Google Chrome version 148.0.7778.96 or later to address this vulnerability.

Added: May 6, 2026, 7:36 PM
Updated: May 6, 2026, 7:36 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
0.6
exploitability
4.2
remediation
7.7
relevance
7.6
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.