Description
Inappropriate implementation in Printing in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
Published: 2026-06-30
Score: 4.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The flaw is an inappropriate implementation within Chrome’s printing subsystem that allows an attacker who has already compromised the renderer process to serve a crafted HTML page that causes the browser to display misleading graphical elements in the print preview or other UI contexts. This issue is classified as CWE-451 and results in UI spoofing, undermining the integrity of the printing UI.

Affected Systems

All installations of Google Chrome prior to version 150.0.7871.47 are affected.

Risk and Exploitability

The CVSS score of 4.3 indicates low severity, and the EPSS score of less than 1% shows a low probability of exploitation at the time of assessment. There is no evidence of reported exploitation, and the vulnerability is not listed in the CISA KEV catalog. It is inferred that because the flaw requires a prior compromise of the renderer process, widespread exploitation is unlikely.

Generated by OpenCVE AI on July 16, 2026 at 12:01 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update Chrome to version 150.0.7871.47 or later to apply the fixed change.
  • Monitor Google Chrome release notes for additional advisories on printing and renderer security.
  • If your use case involves printing from untrusted sources, consider configuring Chrome policy settings to restrict or disable printing until the issue is fully addressed.

Generated by OpenCVE AI on July 16, 2026 at 12:01 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-4672-1 chromium security update
Debian DSA Debian DSA DSA-6378-1 chromium security update
History

Thu, 16 Jul 2026 12:30:00 +0000

Type Values Removed Values Added
Title Chrome Print UI Spoofing via Rendered HTML

Tue, 14 Jul 2026 11:45:00 +0000

Type Values Removed Values Added
Title Printing UI Spoofing Vulnerability in Chrome Prior to 150.0.7871.47

Mon, 13 Jul 2026 05:00:00 +0000

Type Values Removed Values Added
Title Printing UI Spoofing Vulnerability in Chrome Prior to 150.0.7871.47

Sat, 11 Jul 2026 17:00:00 +0000

Type Values Removed Values Added
Title UI Spoofing Vulnerability in Chrome Printing via Crafted HTML

Fri, 10 Jul 2026 17:30:00 +0000

Type Values Removed Values Added
Title UI Spoofing Vulnerability in Chrome Printing via Crafted HTML

Thu, 09 Jul 2026 21:15:00 +0000

Type Values Removed Values Added
Title Chrome Printing Subsystem Permits UI Spoofing After Renderer Compromise

Wed, 08 Jul 2026 19:15:00 +0000

Type Values Removed Values Added
Title Chrome Printing Subsystem Permits UI Spoofing After Renderer Compromise

Tue, 07 Jul 2026 21:15:00 +0000

Type Values Removed Values Added
Title Chrome Printing UI Spoofing Vulnerability

Mon, 06 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
Title Chrome Printing UI Spoofing Vulnerability

Mon, 06 Jul 2026 03:30:00 +0000

Type Values Removed Values Added
Title Printing UI Spoofing via Crafted HTML in Google Chrome

Sat, 04 Jul 2026 19:45:00 +0000

Type Values Removed Values Added
Title Printing UI Spoofing via Crafted HTML in Google Chrome

Sat, 04 Jul 2026 04:00:00 +0000

Type Values Removed Values Added
Title UI Spoofing via Crafted HTML in Chrome Printing Path

Fri, 03 Jul 2026 12:15:00 +0000

Type Values Removed Values Added
Title UI Spoofing via Crafted HTML in Chrome Printing Path

Fri, 03 Jul 2026 05:00:00 +0000

Type Values Removed Values Added
Title Chrome UI Spoofing via Printing Subsystem

Thu, 02 Jul 2026 11:15:00 +0000

Type Values Removed Values Added
Title Chrome UI Spoofing via Printing Subsystem

Thu, 02 Jul 2026 00:00:00 +0000

Type Values Removed Values Added
Title Inappropriate Printing Implementation Enables UI Spoofing in Chrome
Weaknesses CWE-79

Wed, 01 Jul 2026 15:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-451
Metrics cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 01 Jul 2026 11:30:00 +0000

Type Values Removed Values Added
Title Inappropriate Printing Implementation Enables UI Spoofing in Chrome
Weaknesses CWE-79

Wed, 01 Jul 2026 10:30:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Wed, 01 Jul 2026 09:30:00 +0000

Type Values Removed Values Added
Title UI Spoofing in Chrome Printing via Renderer Compromise
Weaknesses CWE-1021
CWE-79

Wed, 01 Jul 2026 03:45:00 +0000

Type Values Removed Values Added
Title UI Spoofing in Chrome Printing via Renderer Compromise
Weaknesses CWE-1021
CWE-79

Tue, 30 Jun 2026 23:15:00 +0000

Type Values Removed Values Added
Description Inappropriate implementation in Printing in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
References

Subscriptions

Google Chrome
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-07-01T14:48:09.455Z

Reserved: 2026-06-29T23:11:47.466Z

Link: CVE-2026-14127

cve-icon Vulnrichment

Updated: 2026-07-01T14:48:04.024Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-16T12:15:16Z

Weaknesses
  • CWE-451

    User Interface (UI) Misrepresentation of Critical Information