SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-17842

MEDIUM · CVSS 6.5 EPSS 0.24%

Source: NVD + CISA KEV + EPSS · Published 2026-07-30 · Last synced 2026-08-29

CyberRota Analysis

AI-Generated

A vulnerability in Google Chrome for iOS prior to version 151.0.7922.72 allows remote attackers to bypass the same origin policy by tricking users into performing specific UI gestures on a malicious HTML page. This could lead to unauthorized access to sensitive data across different origins, potentially compromising user privacy and security. Users and organizations utilizing Chrome on iOS should prioritize updating to the latest version to mitigate this risk.

CVE
CVE-2026-17842
Severity
MEDIUM
CVSS
6.5
EPSS
0.24%
Chrome

Original NVD Description

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)

Related CVEs

Other vulnerabilities affecting the same vendor(s)