PT-2026-66161
CVE-2026-17842
·
Published
2026-07-30
·
Updated
2026-10-28
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Google Chrome on iOS versions prior to 151.0.7922.72
Description
An inappropriate implementation in Chrome for iOS allows a remote attacker to bypass the same origin policy—a security mechanism that restricts how a document or script loaded from one origin can interact with a resource from another origin—by using a crafted HTML page and convincing a user to perform specific UI gestures.
Recommendations
Update Google Chrome on iOS to version 151.0.7922.72 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾