What is the CVSS score of CVE-2026-14075?

CVE-2026-14075 has a CVSS 3.1 base score of 4.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N. EPSS exploitation probability: 0.2%.

Is there a patch available for CVE-2026-14075?

Yes, a patch is available for CVE-2026-14075. Update the affected software to the latest version immediately.

Chrome for iOS CVE-2026-14075

EUVD-2026-40762 MEDIUM

Client-Side Enforcement of Server-Side Security (CWE-602)

2026-06-30 chrome-cve-admin@google.com

GHSA-mhhg-7472-3pg7

Authentication Bypass Apple Google Suse

4.3

CVSS 3.1 · Vendor: google

Severity by source

Vendor (google) PRIMARY

4.3 MEDIUM

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

vuln.today AI

4.3 MEDIUM

Referrer leakage is a confidentiality impact (C:L), not integrity; no integrity or availability impact applies to policy bypass of this class.

3.1 AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

SUSE

MEDIUM

qualitative

Primary rating from Vendor (google).

CVSS VectorVendor: google

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 01, 2026 - 14:38 vuln.today

CVSS changed

Jul 01, 2026 - 14:22 NVD

4.3 (MEDIUM)

CVE Published

Jun 30, 2026 - 23:17 cve.org

UNKNOWN (no severity yet)

CVE Published

Jun 30, 2026 - 23:17 cve.org

MEDIUM 4.3

DescriptionCVE.org

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to bypass no-referrer policy via a crafted HTML page. (Chromium security severity: Low)

AnalysisAI

No-referrer policy bypass in Google Chrome for iOS prior to 150.0.7871.47 allows a remote attacker to capture referrer URL information that the browser was supposed to suppress. Exploitation requires user interaction - the victim must visit a crafted HTML page served by the attacker - and exploits a client-side enforcement gap (CWE-602) specific to the iOS build of Chrome. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Craft malicious HTML page

Delivery

Deliver link via phishing or malicious ad

Exploit

Victim opens link in Chrome iOS

Execution

Browser bypasses no-referrer policy

Impact

Referer header with source URL transmitted to attacker server

Access

Craft malicious HTML page

Delivery

Deliver link via phishing or malicious ad

Exploit

Victim opens link in Chrome iOS

Execution

Browser bypasses no-referrer policy

Impact

Referer header with source URL transmitted to attacker server

Vulnerability AssessmentAI

Exploitation	The victim must be using Google Chrome on an iOS device running a version prior to 150.0.7871.47. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	CVSS 4.3 (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) reflects a moderate-but-constrained vulnerability. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker hosts a malicious HTML page and induces a Chrome for iOS user to navigate to it - via a phishing link, malicious ad, or embedded iframe on a compromised site. When the victim's browser navigates from a page with a no-referrer policy in place, Chrome for iOS incorrectly sends the Referer header to the attacker's server, revealing the URL the user came from, which may contain session tokens, search queries, or other URL-embedded parameters the originating site intended to protect. …
Remediation	Update Google Chrome on iOS to version 150.0.7871.47 or later via the Apple App Store. … Detailed patch versions, workarounds, and compensating controls in full report.