Incorrect security UI in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Medium)

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact High

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Google
  • Chrome

No data.

No data.

References
Link Providers
https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html cve-icon cve-icon
https://issues.chromium.org/issues/501854535 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2026-17755 cve-icon
https://www.cve.org/CVERecord?id=CVE-2026-17755 cve-icon
History

Fri, 31 Jul 2026 00:15:00 +0000

Type Values Removed Values Added
Title chromium-browser: chromium-browser: Incorrect security UI in Extensions
Weaknesses CWE-1021
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.6, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N'}

threat_severity

Moderate

Thu, 30 Jul 2026 04:15:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Thu, 30 Jul 2026 01:00:00 +0000

Type Values Removed Values Added
Description Incorrect security UI in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Medium)
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published: 2026-07-30T00:19:12.713Z

Updated: 2026-07-30T00:19:12.713Z

Reserved: 2026-07-27T23:34:38.428Z

Link: CVE-2026-17755

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-07-30T00:19:12Z

Links: CVE-2026-17755 - Bugzilla