Live › vulnerability › CVE-2026-121177
Google Chrome on iOS before 157.0.8103.38 shows a misleading PageInfo panel when a visited page is crafted. A remote attacker can use a crafted HTML page to spoof UI elements, which may make a site look trustworthy when it is not.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 21:19 UTC. All times on this page are UTC.
Anyone using Google Chrome on iOS before 157.0.8103.38 who visits a page an attacker controls. Users of other browsers or of Chrome on other platforms are not covered by this entry.
No product ranges from the sources yet.
157.0.8103.38 are affected.157.0.8103.38Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
UI misrepresentation in PageInfo in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
This page as .md · .json · in your agent: get_signal("CVE-2026-121177")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.