CVE-2026-13847

MediumCVSS 6.5

Published: 30/06/2026(UTC)Updated: 02/07/2026(UTC)Translated: 03/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.28%

20th percentile — higher than 20% of all known CVEs

Summary

Insufficient validation of untrusted input in Chrome for iOS prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

Risk Assessment

Risk of cross-origin data leakage, potentially leading to session theft or user data compromise.

Recommendation

Immediately update Chrome for iOS to version 150.0.7871.47 or later.

Original NVD description (English source)

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)