cve-2026-7998

CVE-2026-7998 is a low-severity Chromium Dialog UI spoofing vulnerability disclosed on May 6, 2026, affecting Google Chrome before version 148.0.7778.96 on Linux and 148.0.7778.96/97 on Windows and macOS. The flaw can enable UI spoofing after an attacker has already compromised the renderer process. While not a standalone browser catastrophe, it represents the kind of weakness that makes exploit chains harder to defend against. Microsoft Edge inherits much of Chromium's security surface, so Windows and Edge administrators should treat this as a relevant advisory. The practical response is to ensure browsers are updated to patched versions.