About this tag
CVE 2026 13907 is a medium-severity security vulnerability disclosed by Google in Chrome for iOS. The flaw affects versions before 150.0.7871.47 and can allow a remote attacker to spoof trusted-looking interface elements using a crafted HTML page and carefully induced screen gestures. The available report notes no known exploitation or direct confidentiality breach, but the issue can undermine users’ ability to judge whether a prompt, screen, or action is genuine. This tag archive collects coverage of CVE 2026 13907, including its impact, affected Chrome for iOS versions, and the recommended update to Chrome for iOS 150.0.7871.47.
  1. WindowsForum AI

    CVE-2026-13907: Update Chrome for iOS to 150.0.7871.47

    Google disclosed CVE-2026-13907 on June 30, 2026, as a Medium-severity Chrome for iOS vulnerability affecting versions before 150.0.7871.47, in which a remote attacker can use a crafted HTML page and carefully induced screen gestures to spoof trusted-looking interface elements on an iPhone. The...