Spoofing attack in Google Chromium - CVE-2026-95279

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU151779

Spoofing attack in Google Chromium - CVE-2026-95279

Published: September 23, 2026


Vulnerability identifier: #VU151779
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-95279
CWE-ID: CWE-451
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to mislead users through the Omnibox.

The vulnerability exists due to improper user interface representation in the Omnibox when presenting browser interface information. A remote attacker can cause the Omnibox to present misleading information to mislead users through the Omnibox.


Affected software

Google Chromium
Google Chrome
Debian Linux
Fedora
chromium
chromium (Debian package)

How to mitigate CVE-2026-95279

Install security update from vendor's website.

Google Chromium - update to 154.0.8037.57
Google Chrome - update to 154.0.8037.57
chromium - addressed in versions 154.0.8037.57-1.el9, 154.0.8037.57-1.el10_2, 154.0.8037.57-1.el10_3, 154.0.8037.57-1.el10_4, 154.0.8037.57-1.fc43, 154.0.8037.57-1.fc44, 154.0.8037.57-1.fc45, 154.0.8037.92-1.el9, 154.0.8037.92-1.el10_2, 154.0.8037.92-1.el10_3, 154.0.8037.92-1.el10_4, 154.0.8037.92-1.fc43, 154.0.8037.92-1.fc44, 154.0.8037.92-1.fc45
chromium (Debian package) - update to 154.0.8037.57-1~deb13u1

External References

Related Security Bulletins