CVE-2026-13843
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk22th percentile — higher than 22% of all known CVEs
Summary
Insufficient validation of untrusted input in Chrome for iOS prior to version 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
Risk Assessment
The risk involves a potential sandbox escape, which could lead to privilege escalation and compromise of the iOS system security.
Recommendation
It is recommended to immediately update Chrome for iOS to version 150.0.7871.47 or later.
Original NVD description (English source)
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)