Live › vulnerability › CVE-2026-121053
A flaw in the Transactions Platform of Google Chrome on Android lets a crafted HTML page display spoofed UI elements. An attacker who tricks a user into visiting the page could make fake interface content appear as genuine.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 21:19 UTC. All times on this page are UTC.
Android devices running Google Chrome before 157.0.8103.38. The attack requires a user to be lured to a crafted page through social engineering. Desktop Chrome and other platforms are not stated as affected.
No product ranges from the sources yet.
chrome://version in the address bar.157.0.8103.38 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
UI misrepresentation in Transactions Platform in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
This page as .md · .json · in your agent: get_signal("CVE-2026-121053")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.