VulnSocial

CVE-2026-2322Disclosure(apple / chrome)

MEDIUMCVSS 5.4 · MEDIUM

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Prioritize remediation for apple chrome systems immediately
  • Assume compromise if assets are exposed
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

apple CVEsBack to dashboard
4.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-451

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • chrome
  • linux_kernel
  • macos
  • windows

Threat summary

  • Active exploitation appears in 1 classified signals
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-02-11); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
applegooglelinuxmicrosoft
Products
chromelinux_kernelmacoswindows

1 version affected across 4 products

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-02-11: 1Mentions · 2026-06-02: 1Active Exploitation · 2026-06-02: 1Technical Details · 2026-02-11: 1Technical Details · 2026-06-02: 102-1106-02
Signal classification2 categories
Disclosure
150.0%
Active Exploitation
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-02-111
Disclosure1
2026-06-021
Active Exploitation1
Full discourse2 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-2322 UI Spoofing Vulnerability in Google Chrome Before 145.0.7632.45 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-2322

    Post summary

    A brief announcement from Vulmon reporting a UI spoofing vulnerability in Google Chrome versions prior to 145.0.7632.45, with no PoC, exploit, or patch details provided.

    0001072
    4.0K followersView on X
  • UNDERCODE TESTING@UndercodeUpdate
    Active Exploitation

    🚨 #CVE-2026-2322 Regression Bypass: How Attackers Are Exploiting the Unpatched File Input Flaw + Video https://undercodetesting.com/cve-2026-2322-regression-bypass-how-attackers-are-exploiting-the-unpatched-file-input-flaw-video/ Educational Purposes!

    Post summary

    The post highlights that CVE-2026-2322 is currently being exploited in the wild, as illustrated by a video, but does not provide PoC details or patch information.

    0000049
    592 followersView on X
CPE platform detail4 entries

4 of 4 entries

PartVendorProductVersionTarget SWTarget HW
OSapplemacos---
Appgooglechrome---
OSlinuxlinux_kernel---
OSmicrosoftwindows---

Explore more

Back to dashboardapple CVEsgoogle CVEslinux CVEschrome vulnerabilities