CVE-2026-13918

HighCVSS 8.8

Published: 30/06/2026(UTC)Updated: 01/07/2026(UTC)Translated: 02/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.28%

20th percentile — higher than 20% of all known CVEs

Summary

A Use-After-Free vulnerability in Chrome for iOS prior to version 150.0.7871.47 allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Risk Assessment

An attacker could remotely crash the browser or potentially execute arbitrary code, compromising user data confidentiality and integrity.

Recommendation

Immediately update Google Chrome on iOS to version 150.0.7871.47 or later.

Original NVD description (English source)

Use after free in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)