CyberRota Analysis
AI-GeneratedA vulnerability in the FullScreen feature of Google Chrome on Android prior to version 151.0.7922.72 allows remote attackers to execute UI spoofing through a specially crafted HTML page. This could mislead users into interacting with deceptive interfaces, potentially compromising sensitive information. Android users and developers of web applications should prioritize addressing this issue to mitigate the risk of exploitation.
CVE
CVE-2026-17938
Severity
MEDIUM
CVSS
4.3
EPSS
0.24%
Android Chrome
Original NVD Description
Inappropriate implementation in FullScreen in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
Related CVEs
Other vulnerabilities affecting the same vendor(s)