universal xss

The universal xss tag covers reporting on CVE-2026-13812, a high-severity universal cross-site scripting vulnerability in Chrome on iOS before version 150.0.7871.47. The issue could let a remote attacker inject scripts or markup from a crafted HTML page after persuading a user to perform specific on-screen gestures. Unlike a flaw limited to one website, this UXSS issue affects how the browser handles trust between origins, allowing hostile content to appear where users expect content from another source. This tag is useful for tracking the vulnerability, understanding its security implications, and finding guidance for users and administrators who need to update Chrome on affected iOS devices.