What is the CVSS score of CVE-2026-14075?

CVE-2026-14075 has a CVSS 3.1 base score of 4.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N. EPSS exploitation probability: 0.2%.

Is there a patch available for CVE-2026-14075?

Yes, a patch is available for CVE-2026-14075. Update the affected software to the latest version immediately.

Chrome for iOS CVE-2026-14075

EUVD-2026-40762 MEDIUM

Client-Side Enforcement of Server-Side Security (CWE-602)

2026-06-30 chrome-cve-admin@google.com

GHSA-mhhg-7472-3pg7

Authentication Bypass Google Apple Red Hat Suse

4.3

CVSS 3.1 · Vendor: google

Severity by source

Vendor (google) PRIMARY

4.3 MEDIUM

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

vuln.today AI

4.3 MEDIUM

Referrer leakage is a confidentiality impact (C:L), not integrity; no integrity or availability impact applies to policy bypass of this class.

3.1 AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

SUSE

MEDIUM

qualitative

Red Hat

4.3 LOW

qualitative

Primary rating from Vendor (google).

CVSS VectorVendor: google

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 01, 2026 - 14:38 vuln.today

CVSS changed

Jul 01, 2026 - 14:22 NVD

4.3 (MEDIUM)

CVE Published

Jun 30, 2026 - 23:17 cve.org

UNKNOWN (no severity yet)

CVE Published

Jun 30, 2026 - 23:17 cve.org

MEDIUM 4.3

DescriptionCVE.org

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to bypass no-referrer policy via a crafted HTML page. (Chromium security severity: Low)

AnalysisAI

No-referrer policy bypass in Google Chrome for iOS prior to 150.0.7871.47 allows a remote attacker to capture referrer URL information that the browser was supposed to suppress. Exploitation requires user interaction - the victim must visit a crafted HTML page served by the attacker - and exploits a client-side enforcement gap (CWE-602) specific to the iOS build of Chrome. EPSS is 0.19% (9th percentile) and no active exploitation or KEV listing exists, consistent with the Low Chromium severity rating.

Technical ContextAI

CWE-602 (Client-Side Enforcement of Server-Side Security) identifies cases where the browser, rather than the server, is expected to enforce a security policy but fails to do so. The Referrer-Policy HTTP header - specifically the 'no-referrer' directive - instructs browsers to omit the Referer header on navigations originating from a page, protecting sensitive URL parameters or navigation history from leaking to third parties. Chrome's iOS implementation diverges from the intended behavior when processing certain crafted HTML constructs, causing it to emit the Referer header despite the policy. The affected CPE scope is Google Chrome on iOS, versions prior to 150.0.7871.47, meaning other Chrome platforms (Android, Desktop) are not implicated by this specific issue.

RemediationAI

Update Google Chrome on iOS to version 150.0.7871.47 or later via the Apple App Store. The patch is confirmed available from the vendor per the Chrome Releases blog at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html. For environments where immediate update is not possible, a compensating control is to use an alternative iOS browser (Safari, Firefox for iOS) for sessions where referrer-policy suppression is security-critical, understanding this shifts browser attack surface. Web application operators who rely on no-referrer policy for sensitive URL parameter protection should consider server-side validation to not expose sensitive data in URLs at all, as defense-in-depth against client enforcement gaps of this class.