Live › vulnerability › CVE-2026-121209
A crafted HTML page can make Google Chrome display a misleading address bar, so a visitor may think they are on a different site. The sources rate it Chromium security severity Low and do not describe data theft or code execution.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 21:19 UTC. All times on this page are UTC.
Anyone running Google Chrome before 157.0.8103.38 who visits a malicious or untrusted web page. The sources do not describe server-side exposure, so the risk is to browser users rather than hosted services.
No product ranges from the sources yet.
157.0.8103.38 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
UI misrepresentation in Input in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low)
This page as .md · .json · in your agent: get_signal("CVE-2026-121209")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.