webauthentication

The webauthentication tag covers a reported Chrome on iOS security issue involving CVE-2026-13889. The vulnerability affects versions before 150.0.7871.47 and is described as a medium-severity side-channel issue in Chrome’s WebAuthentication handling. Crafted HTML may allow a remote attacker to leak cross-origin data, creating a browser-confidentiality risk. The available information does not indicate code execution, device takeover, active exploitation, or passkey theft, and it does not establish impact on desktop Chrome, Chrome for Android, Safari, or other browsers. For affected iPhones, the documented response is to update Chrome to version 150.0.7871.47 or later.