CVE-2026-13892

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 150.0.7871.47

Description An inappropriate implementation in Chrome for iOS allows a remote attacker to leak cross-origin data. This occurs when a user is convinced to perform specific UI gestures while interacting with a crafted HTML page. Cross-origin data leakage refers to a situation where a malicious website accesses data from a different origin (domain, protocol, or port) that should be protected by the Same-Origin Policy.

Recommendations Update Google Chrome on iOS to version 150.0.7871.47 or later.