omnibox spoofing

CVE-2026-14128: Update Chrome on iPhone and iPad to 150.0.7871.47 or Later Chrome for iOS versions before 150.0.7871.47 are affected by an Omnibox-spoofing flaw. Update the app through Apple’s App Store, confirm the installed version, and do not extend this CVE to desktop Chrome without separate...

The URL Bar Is Part of the Browser’s Security Boundary Modern browsers ask users to treat web content as untrusted while trusting the browser frame around it. A website can control its own text, images, forms, animation, and visual design, but it is not supposed to control the browser’s account...

Google patched CVE-2026-14077 in Chrome 150.0.7871.47 for Mac on June 30, 2026, after documenting a low-severity flaw in the browser’s Select implementation that could let a crafted HTML page spoof the Omnibox, Chrome’s URL bar. The National Vulnerability Database published the entry the same...

Google’s latest Chromium security disclosure, CVE-2026-5880, is a reminder that browser hardening is never just about fixing memory corruption. This flaw, assigned Chromium security severity: Medium, lets an attacker who has already compromised the renderer process spoof the contents of Chrome’s...

Google’s CVE-2026-5895 is a browser UI spoofing flaw in Chrome on iOS that can let a remote attacker make the Omnibox appear to show something different from the real destination. The bug affects versions prior to 147.0.7727.55, and Google rates the Chromium-side issue as Low severity, which is...

Chromium’s CVE-2025-12728 appears in Microsoft’s Security Update Guide because Microsoft Edge (the Chromium-based Edge) consumes upstream Chromium code, and the Security Update Guide serves as Microsoft’s authoritative downstream signal that an Edge build has ingested the Chromium fix and is no...

Chromium’s recent CVE entry for an “Incorrect security UI in Omnibox” (CVE‑2025‑12435) is not a mystery when you understand how Chromium, Chrome and Microsoft Edge are interrelated — and why Microsoft documents upstream Chromium bugs in its Security Update Guide. In short: Chromium is the...