CVE-2026-18011

LowCVSS 2.4

Published: 30/07/2026(UTC)Updated: 03/08/2026(UTC)Translated: 30/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.09%

1th percentile - higher than 1% of all known CVEs

Summary

Inappropriate implementation in Chrome for iOS on iOS devices prior to version 151.0.7922.72 allows a local attacker to obtain potentially sensitive information from process memory via physical access to the device.

Risk Assessment

Risk of leaking confidential data stored in browser memory if an attacker has physical access to the device.

Recommendation

Update Google Chrome on iOS to version 151.0.7922.72 or later.

Original NVD description (English source)

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via physical access to the device. (Chromium security severity: Low)