CVE-2026-13809
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk20th percentile — higher than 20% of all known CVEs
Summary
Side-channel information leakage vulnerability in Safe Browsing in Google Chrome on iOS prior to 150.0.7871.47. A remote attacker who compromised the renderer process could leak cross-origin data via a crafted HTML page.
Risk Assessment
The risk involves potential theft of sensitive cross-origin data by an attacker who gained control over the renderer process, which could lead to user privacy breaches.
Recommendation
It is recommended to immediately update Google Chrome on iOS to version 150.0.7871.47 or later, which includes a fix for this vulnerability.
Original NVD description (English source)
Side-channel information leakage in Safe Browsing in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)