Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-13916: Google Chrome on iOS UI Spoofing Vulnerability

CVE-2026-13916 · published 4 months ago

Summary

A security issue in Google Chrome on iOS allows a hacker to create a fake website that looks like a real one, potentially tricking users into giving away sensitive information. This issue affects older versions of Google Chrome on iOS, so users should update their browser to the latest version to stay safe.

What to do

Update google chrome to version 150.0.7871.47 or later.

Affected software

Ecosystem	Vendor	Product	Affected versions
Debian:11	debian	chromium	All versions
Debian:12	debian	chromium	All versions
Debian:13	debian	chromium	All versions
Debian:14	debian	chromium	All versions
–	google	chrome	< 150.0.7871.47 `cpe:2.3:a:google:chrome::::::::`

Original advisory text

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: ...

References

https://security-tracker.debian.org/tracker/CVE-2026-13916 Vendor Advisory
https://issues.chromium.org/issues/508283108 Permissions Required
https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_... Vendor Advisory Release Notes

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

4.3 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-451User Interface (UI) Misrepresentation of Critical Information

Timeline

Published30 Jun 2026

Updated4 Nov 2026

First seen4 Jul 2026

Sources

DEBIAN-CVE-2026-13916 · OSV

CVE-2026-13916 · NVD

Track software like this

Free during beta