CVE-2026-13913
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk11th percentile — higher than 11% of all known CVEs
Summary
Insufficient policy enforcement in Autofill in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page.
Risk Assessment
The risk involves potential theft of sensitive user data, such as login credentials or personal information, through UI manipulation, which could lead to privacy breaches and security incidents for the organization.
Recommendation
It is recommended to immediately update Google Chrome on iOS to version 150.0.7871.47 or later to mitigate this vulnerability.
Original NVD description (English source)
Insufficient policy enforcement in Autofill in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)