PT-2026-31513

CVE-2026-5895

Published

2024-10-18

Updated

2026-08-31

Description by

CVSS 3.1

5.4

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

Name of the Vulnerable Software and Affected Versions Google Chrome for iOS versions prior to 147.0.7727.55

Description An incorrect security user interface issue in the Omnibox (the browser's address bar) allows a remote attacker to spoof the contents of the URL bar. This is achieved by using a specially crafted domain name, specifically utilizing two Right-to-Left (RTL) Arabic character subdomains to mislead the user.

Recommendations Update Google Chrome for iOS to version 147.0.7727.55 or later.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-451: User Interface (UI) Misrepresentation of Critical Information

Related identifiers

CVE-2026-5895

BDU:2026-04985