CVE-2026-91723

{"id": "CVE-2026-91723", "cveTags": [], "metrics": {}, "affected": [{"source": "chrome-cve-admin@google.com", "affectedData": [{"vendor": "Google", "product": "Chrome", "versions": [{"status": "affected", "version": "153.0.8010.47", "lessThan": "153.0.8010.47", "versionType": "custom"}]}]}], "published": "2026-09-15T21:16:45.463", "references": [{"url": "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html", "source": "chrome-cve-admin@google.com"}, {"url": "https://issues.chromium.org/issues/474131239", "source": "chrome-cve-admin@google.com"}], "vulnStatus": "Received", "weaknesses": [{"type": "Primary", "source": "chrome-cve-admin@google.com", "description": [{"lang": "en", "value": "CWE-362"}]}], "descriptions": [{"lang": "en", "value": "Race condition in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)"}], "lastModified": "2026-09-15T21:16:45.463", "sourceIdentifier": "chrome-cve-admin@google.com"}