Chromium’s CVE-2026-2316 — an insufficient policy enforcement in Frames issue that allows UI spoofing via a crafted HTML page — has been logged not only in Chromium/Chrome advisories but also inside Microsoft’s Security Update Guide (SUG). That single cross-listing raises a common question: why...