chrome ios

CVE-2026-14066 is an input-validation vulnerability in Chrome on iOS that can allow a remote attacker to bypass navigation restrictions through a crafted HTML page. The NVD description records Chromium security severity as Low, while the CISA-ADP CVSS 3.1 contribution produces a 4.3 Medium...

CVE-2026-13946 affects Google Chrome on iOS versions earlier than 150.0.7871.47. The published description says crafted HTML can cause cross-origin information leakage. Users should update Chrome through the App Store to 150.0.7871.47 or later and check Chrome’s app/version information if...

Google has fixed CVE-2026-13918 in Chrome for iOS 150.0.7871.47, closing a use-after-free flaw that could let a remote attacker use a crafted HTML page to trigger heap corruption on iPhones running an earlier Chrome version without first needing account privileges, although user interaction is...

Chrome on iOS versions before 150.0.7871.47 are the affected assets identified in the supplied NVD record for CVE-2026-13915. The Chrome-sourced description says a remote attacker could use a crafted HTML page and persuade a user to perform specific interface gestures, potentially triggering...

Google fixed CVE-2026-13913 in Chrome for iOS 150.0.7871.47, closing a Medium-severity Autofill policy flaw that could let a remote attacker leak data across web-origin boundaries after persuading a user to perform specific interface gestures on a crafted HTML page. The vulnerability is not...

CVE-2026-13908 is a Medium-severity vulnerability affecting Chrome on iOS before version 150.0.7871.47. According to the Chrome-sourced description, insufficient validation of untrusted input in the Omnibox could allow a remote attacker to use malicious network traffic, together with specific...

Google fixed CVE-2026-13905 in Chrome for iOS version 150.0.7871.47, closing a medium-severity race condition that could allow a local attacker with physical access to obtain potentially sensitive information from the browser’s process memory on an iPhone running an earlier version. The narrow...

Chrome on iOS before version 150.0.7871.47 is affected by CVE-2026-13904, a medium-severity Safe Browsing vulnerability that could allow a remote attacker to use crafted HTML to bypass navigation restrictions after user interaction. The public record does not describe arbitrary code execution...

Google’s CVE-2026-13902 affects Chrome on iOS versions earlier than 150.0.7871.47 and allows a remote attacker to spoof browser-interface information through crafted HTML. The publicly available record describes a Medium-severity UI-spoofing vulnerability requiring user interaction, not code...

Google Chrome on iOS versions before 150.0.7871.47 are affected by CVE-2026-13892, a medium-severity interface flaw disclosed by Chrome and published by NVD on June 30, 2026, that can let a remote attacker use a crafted page and induced touch gestures to leak cross-origin data. The fixed-version...

Chrome on iOS before version 150.0.7871.47 is affected by CVE-2026-13889, a medium-severity side-channel vulnerability that may allow a remote attacker to use crafted HTML to leak cross-origin data through Chrome’s WebAuthentication handling. The documented impact is a browser-confidentiality...

For end users, the update path is direct: Open the App Store on the iPhone or iPad. Search for Google Chrome. Tap Update. If the button says Open, the App Store is not currently offering a newer build to that device. Open Chrome. Tap … and go to Settings > Google Chrome. On releases where that...

Google’s CVE-2026-5895 is a browser UI spoofing flaw in Chrome on iOS that can let a remote attacker make the Omnibox appear to show something different from the real destination. The bug affects versions prior to 147.0.7727.55, and Google rates the Chromium-side issue as Low severity, which is...