CVE-2026-13889

MediumCVSS 6.5

Published: 30/06/2026(UTC)Updated: 01/07/2026(UTC)Translated: 02/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

21th percentile — higher than 21% of all known CVEs

Summary

A side-channel information leakage vulnerability in WebAuthentication in Google Chrome on iOS prior to version 150.0.7871.47 allows a remote attacker to leak cross-origin data via a crafted HTML page.

Risk Assessment

The organization is at risk of cross-origin data leakage, potentially leading to theft of authentication tokens or other sensitive information.

Recommendation

Immediately update Google Chrome on iOS devices to version 150.0.7871.47 or later.

Original NVD description (English source)

Side-channel information leakage in WebAuthentication in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)