CyberRota Analysis
AI-GeneratedA vulnerability in the Updater component of Google Chrome on Windows prior to version 151.0.7922.72 allows local attackers to exploit UI spoofing through a malicious file. This could lead to users being misled into providing sensitive information or executing unintended actions. Organizations using affected versions of Chrome should prioritize patching to mitigate potential risks associated with local attacks.
CVE
CVE-2026-18018
Severity
MEDIUM
CVSS
4
EPSS
0.08%
Windows Chrome
Original NVD Description
Inappropriate implementation in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform UI spoofing via a malicious file. (Chromium security severity: Low)
Related CVEs
Other vulnerabilities affecting the same vendor(s)