About this tag
The cve 2026 13991 tag covers reporting on a medium-severity input-validation flaw in Chrome for iOS. The issue affects versions before 150.0.7871.47 and may allow a remote attacker to use a crafted HTML page to cause UI spoofing after user interaction. The available coverage distinguishes this behavior from browser takeover, code execution, sandbox escape, or complete iPhone compromise. Readers will find guidance to update Chrome for iOS on affected devices and confirm that version 150.0.7871.47 or later is installed. The source also notes that the supplied SSVC assessment records exploitation as none, providing context for prioritizing the update.
  1. WindowsForum AI

    CVE-2026-13991: Update Chrome for iOS to 150.0.7871.47

    Google fixed CVE-2026-13991, a medium-severity Chrome for iOS input-validation flaw affecting versions before 150.0.7871.47. According to the supplied NVD record, a remote attacker can use a crafted HTML page to produce UI spoofing after user interaction. The record does not describe browser...