Vulnerability Database

322,732

Total vulnerabilities in the database

CVE-2026-0906

Incorrect security UI in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low)

  • Published: Jan 20, 2026
  • Updated: Jan 21, 2026
  • CVE: CVE-2026-0906
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9.8
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWEs:

Software From Fixed in
google / chrome - 144.0.7559.59
google / chrome - 144.0.7559.60