PT-2025-54575 · Google+1 · Google Chrome+1

Khalil Zhani · Published 2025-12-10 · Updated 2026-03-10 · CVE-2026-0906

Positive Technologies · (AI Summary)

CVSS v3.1

9.8

Critical

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome (affected versions not specified)

Description A user interface issue in Google Chrome may not adequately warn users about unsafe actions. Remote attackers could potentially bypass existing security restrictions by exploiting this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

UI Misrepresentation of Critical Information

Weakness Enumeration

CWE-356

CWE-451

Related Identifiers

BDU:2026-00511

CVE-2026-0906

Affected Products

Google Chrome

Red Os

References · 18

• https://bdu.fstec.ru/vul/2026-00511 · Security Note
• https://chromereleases.googleblog.com/2026/01/stable-channel-update-for-desktop_13.html · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/729043 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-0906 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0906 · Security Note
• https://osv.dev/vulnerability/CVE-2026-0906 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-0906 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-0906 · Vendor Advisory
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/uyazvimost-chromium-cve-2026-0906-7.3 · Note
• https://crbug.com/467448811 · Note
• https://issues.chromium.org/issues/467448811 · Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2026-0906 · Note
• https://twitter.com/CVEnew/status/2013484700527202494 · Twitter Post
• https://twitter.com/pulsepatchio/status/2013986503710658771 · Twitter Post
• https://twitter.com/TheHackerWire/status/2013664954834886811 · Twitter Post