mobile security

Affected: Chrome for iOS versions earlier than 150.0.7871.47 are affected by CVE-2026-13917. Action: Update or require Chrome for iOS 150.0.7871.47 or later, then use current application inventory to verify that managed devices crossed the fixed-version threshold. Google describes CVE-2026-13917...

Google Chrome on iOS before version 150.0.7871.47 is affected by CVE-2026-13916, a Medium-severity implementation flaw that can allow a remote attacker to perform UI spoofing through a crafted HTML page on an iPhone or iPad. The Chrome-originated CVE description, as presented by the National...

Chrome on iOS versions before 150.0.7871.47 are the affected assets identified in the supplied NVD record for CVE-2026-13915. The Chrome-sourced description says a remote attacker could use a crafted HTML page and persuade a user to perform specific interface gestures, potentially triggering...

CVE-2026-13912 is a medium-severity Safe Browsing interface flaw documented in Chrome on iOS versions before 150.0.7871.47. According to the Chrome-supplied description in the National Vulnerability Database, a remote attacker could use a crafted HTML page to perform user-interface spoofing...

CVE-2026-13908 is a Medium-severity vulnerability affecting Chrome on iOS before version 150.0.7871.47. According to the Chrome-sourced description, insufficient validation of untrusted input in the Omnibox could allow a remote attacker to use malicious network traffic, together with specific...

Google disclosed CVE-2026-13907 on June 30, 2026, as a Medium-severity Chrome for iOS vulnerability affecting versions before 150.0.7871.47, in which a remote attacker can use a crafted HTML page and carefully induced screen gestures to spoof trusted-looking interface elements on an iPhone. The...

Google fixed CVE-2026-13905 in Chrome for iOS version 150.0.7871.47, closing a medium-severity race condition that could allow a local attacker with physical access to obtain potentially sensitive information from the browser’s process memory on an iPhone running an earlier version. The narrow...

Chrome on iOS before version 150.0.7871.47 is affected by CVE-2026-13904, a medium-severity Safe Browsing vulnerability that could allow a remote attacker to use crafted HTML to bypass navigation restrictions after user interaction. The public record does not describe arbitrary code execution...

Google’s CVE-2026-13902 affects Chrome on iOS versions earlier than 150.0.7871.47 and allows a remote attacker to spoof browser-interface information through crafted HTML. The publicly available record describes a Medium-severity UI-spoofing vulnerability requiring user interaction, not code...

Google Chrome on Android before version 150.0.7871.47 is affected by CVE-2026-13887. The documented fix boundary is version 150.0.7871.47 or later. Desktop Chrome is not confirmed affected by the supplied record, even though the referenced Google release page has a desktop-oriented title...

CVE-2026-13885 affects Google Chrome on Android before version 150.0.7871.47. According to the Chrome-sourced description, crafted HTML can trigger a use-after-free condition in Skia and allow a remote attacker to execute arbitrary code inside Chrome’s sandbox. Chrome labels the vulnerability...

Google has fixed CVE-2026-13852, a high-severity flaw in Chrome for Android before version 150.0.7871.47 that let a local attacker use a crafted HTML page to bypass discretionary access control in WebAppInstalls, and users and administrators should treat the corrected build as the minimum safe...

Google fixed CVE-2026-13808 in Chrome for iOS 150.0.7871.47, closing an insufficient-data-validation flaw that could let a local attacker with physical access to an iPhone or iPad extract potentially sensitive information from the browser’s process memory without requiring privileges or user...

For end users, the update path is direct: Open the App Store on the iPhone or iPad. Search for Google Chrome. Tap Update. If the button says Open, the App Store is not currently offering a newer build to that device. Open Chrome. Tap … and go to Settings > Google Chrome. On releases where that...

Microsoft plans to let authorized users annotate sensitivity-label protected PDFs directly inside the OneDrive apps for iOS and Android in August 2026, preserving the file’s Microsoft Purview encryption and usage rights while supporting ink, highlights, text, notes, signatures, stamps...

How-To Geek’s Android explainer argues that AOSP remains open source, but the Android phone most people buy from Samsung, OnePlus, or another certified vendor is a layered product where Google services, OEM code, drivers, and policy controls define the real experience. The uncomfortable truth is...

Microsoft added roadmap item 567311 on July 8, 2026, for a new Purview Data Loss Prevention capability that will evaluate clipboard sharing inside Intune Mobile Application Management-protected mobile apps before sensitive data is allowed to leave managed workflows on users’ devices across...

Google’s Android 17 rollout reached Pixel devices in June 2026 after a shortened preview cycle, and a new wave of coverage is now framing the release around hidden quality-of-life features rather than headline Gemini AI branding. That framing is useful, but it also needs discipline. Android’s...

Google announced on June 23, 2026 that Chrome on Android and iOS is gaining advanced autofill for complex details such as flight, vehicle, passport, driver’s license, and Known Traveler Number data, while also pulling more information directly from Google Wallet across mobile and desktop. The...

Google released Android 16, codenamed Baklava, on June 10, 2025, bringing the stable update to supported Pixel devices in June after months of signaling that Android’s major annual release would move from its usual late-summer or fall window into the second quarter. The rumored June 3 date...