CVE-2026-8585
HighSummary
Inappropriate implementation in Media in Google Chrome on iOS prior to version 148.0.7778.168 allowed a remote attacker who compromised the renderer process to perform an out of bounds memory read via a crafted HTML page.
Risk Assessment
An attacker could gain access to sensitive data or perform unauthorized operations on the user's device, posing a security threat to the organization.
Recommendation
It is recommended to update Google Chrome on iOS to the latest version to mitigate the risk associated with this vulnerability.
Other vulnerabilities in Google Chrome on iOS
Original NVD description (English source)
Inappropriate implementation in Media in Google Chrome on iOS prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)