Incorrect security UI in PictureInPicture in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-3942
NONE
EPSS 0.02%
Updated Mar 11, 2026
Google
CVE Details
CVE ID
CVE-2026-3942
Published Date
Mar 11, 2026
Vendor
Google
Severity
NONE
Exploit Prediction (EPSS)
Probability of Exploit
0.02%
Likelihood of exploitation in next 30 days
Percentile:
5.7th percentile (higher than 5.7% of all CVEs)
Standard patching cycle
Impact
Minimal impact
Source
View Advisory