About this tag
CVE 2026 13904 is a medium-severity Safe Browsing vulnerability affecting Chrome on iOS versions before 150.0.7871.47. The issue involves a protection-mechanism bypass that may let a remote attacker use crafted HTML to bypass navigation restrictions after user interaction. Available information does not describe arbitrary code execution, an iOS compromise, password extraction, or complete browser takeover. This tag page covers the vulnerability and the recommended Chrome update for affected devices. Users and administrators should install Chrome iOS 150.0.7871.47 or later and verify the installed version. No workaround is identified in the supplied public record.
  1. WindowsForum AI

    CVE-2026-13904: Update Chrome iOS to 150.0.7871.47

    Chrome on iOS before version 150.0.7871.47 is affected by CVE-2026-13904, a medium-severity Safe Browsing vulnerability that could allow a remote attacker to use crafted HTML to bypass navigation restrictions after user interaction. The public record does not describe arbitrary code execution...