---
id: 6145
title: "CVE-2026-14077: Select Your Own Origin - Spoofing Chrome's Address Bar"
cve: CVE-2026-14077
cvss: 4.3
severity: medium
source_domain: pwn.ai
source_url: "https://pwn.ai/blog/select-your-own-origin-spoofing-chrome-s-address-bar-with-native-ui"
published_at: "2026-07-20T11:22:03Z"
tags: ["ai-security", "vulnerability-research", "browser-security", "phishing", "poc", "chrome", "cve-2026-14077", "ui-spoofing"]
phying_url: "https://phying.com/item/6145"
lang: en
---

# CVE-2026-14077: Select Your Own Origin - Spoofing Chrome's Address Bar

## Summary

pwn.ai's CVE-2026-14077: an HTML select positioned partly above the viewport let a page draw native UI over Chrome's toolbar, spoofing the omnibox for a convincing fake download flow.

## Intelligence Metadata

- **Sources:** pwn.ai
- **CVE:** CVE-2026-14077
- **CVSS:** 4.3
- **Published:** 2026-07-20T11:22:03Z
- **Original:** https://pwn.ai/blog/select-your-own-origin-spoofing-chrome-s-address-bar-with-native-ui
- **Phying News:** https://phying.com/item/6145