CVE-2026-13983
MediumCVSS 4.2Exploitation Probability (EPSS)
Low risk6th percentile — higher than 6% of all known CVEs
Summary
An inappropriate implementation in Chrome for iOS prior to version 150.0.7871.47 allowed a remote attacker, after convincing a user to perform specific UI gestures, to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
Risk Assessment
The risk involves the ability to display a fake URL, which could lead to phishing and fraud, as the user may believe they are on a trusted site.
Recommendation
It is recommended to immediately update Google Chrome on iOS to version 150.0.7871.47 or later, which includes a fix for this vulnerability.
Original NVD description (English source)
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)