Incorrect security UI in PictureInPicture in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-3942
NONE
EPSS 0.03%
Updated Mar 11, 2026
Google
CVE Details
CVE ID
CVE-2026-3942
Published Date
Mar 11, 2026
Vendor
Google
Severity
NONE
Exploit Prediction (EPSS)
Probability of Exploit
0.03%
Likelihood of exploitation in next 30 days
Percentile:
8.8th percentile (higher than 8.8% of all CVEs)
Standard patching cycle
Impact
Minimal impact
Source
View Advisory