MEDIUM

CVE-2026-93386

Google Chrome 2026-09-17 CVSS v3.1

CVSS

5.4

Description

UI misrepresentation in WebAppInstalls in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

Weakness (CWE)

CWE-451

EPSS Score

0.22%

Probability of exploitation in next 30 days

13.3th percentile

References

https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0194356994.html Release Notes, Vendor Advisory https://issues.chromium.org/issues/513996595 Permissions Required

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE