CVE-2026-13813

HighCVSS 8.3

Published: 30/06/2026(UTC)Updated: 02/07/2026(UTC)Translated: 03/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.28%

20th percentile — higher than 20% of all known CVEs

Summary

Insufficient policy enforcement in Chrome for iOS allows an attacker who compromised the renderer process to potentially escape the sandbox via a crafted HTML page.

Risk Assessment

The risk for the organization is the potential escalation from renderer compromise to full system access, leading to device takeover or data theft.

Recommendation

Immediately update Google Chrome on iOS to version 150.0.7871.47 or later.

Original NVD description (English source)

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)