cve 2026 13889

The cve 2026 13889 tag covers a medium-severity security issue affecting Chrome on iOS before version 150.0.7871.47. The vulnerability involves Chrome’s WebAuthentication handling and could let a remote attacker use specially crafted HTML to leak cross-origin data, creating a browser-confidentiality risk. Available information does not indicate code execution, device takeover, active exploitation, or confirmed passkey theft, and it does not establish impact on desktop Chrome, Chrome for Android, Safari, or other browsers. For affected iPhone users, the practical mitigation is to update Chrome to version 150.0.7871.47 or later. This archive collects the available guidance and technical context for assessing the issue.