PT-2026-54084

CVE-2026-13807

Published

2026-06-30

Updated

2026-08-31

Description by

CVSS 3.1

7.5

High

MetricsAV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 150.0.7871.47

Description A use after free issue exists in the Import component. This occurs when a remote attacker convinces a user to perform specific UI gestures, potentially leading to arbitrary code execution through a malicious file. Use after free is a memory corruption flaw where the program continues to use a pointer after it has been freed.

Recommendations Update Google Chrome on iOS to version 150.0.7871.47 or later.

Exploitability

Fix

Impacts

Researchers

Jason Villaluna

Vendors

Affected products

Weakness enumeration

CWE-416: Use After Free

Related identifiers

CVE-2026-13807