EUVD-2026-40824
GHSA-crvr-3r6g-3g4x
Severity by source
AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L
UI spoofing via specific gestures warrants AC:H and UI:R; no confidentiality or availability impact is supported by the description - A:L from NVD is not justified.
Primary rating from Vendor (google).
CVSS VectorVendor: google
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L
Lifecycle Timeline
4DescriptionCVE.org
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
AnalysisAI
UI spoofing in Google Chrome for iOS prior to 150.0.7871.47 allows a remote attacker to manipulate browser interface elements via a crafted HTML page, provided the attacker can lure the victim into performing specific UI gestures. The root cause is insufficient validation of untrusted HTML input (CWE-20) within Chrome's iOS-specific rendering layer, resulting in low-integrity and low-availability impact. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires two specific conditions: (1) the victim must navigate to a crafted HTML page hosted by the attacker using Chrome for iOS on an Apple iOS device running a version prior to 150.0.7871.47, and (2) the victim must be convinced to perform specific UI gestures - such as particular touch or swipe sequences - as part of the attack flow. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The NVD-assigned CVSS 3.1 base score of 4.2 (Medium) with vector AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L reflects a genuinely low-priority finding. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker hosts a crafted HTML page that abuses Chrome for iOS's insufficient input validation to manipulate browser UI elements such as the address bar, security indicators, or overlay prompts. The victim is directed to the malicious page (e.g., via phishing link) and tricked into performing specific touch gestures - such as swipes or taps in particular sequences - which trigger the spoofed UI state, potentially causing the victim to believe they are on a trusted site or dismissing a legitimate security warning. … |
| Remediation | Update Google Chrome for iOS to version 150.0.7871.47 or later; this is the vendor-released patch as confirmed by the Chrome Stable Channel Update advisory at chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html (note the URL references 'desktop' but covers the broader stable channel release). … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-20 – Improper Input Validation
View allSame technique Information Disclosure
View allVendor StatusVendor
SUSE
Severity: Moderate| Product | Status |
|---|---|
| SUSE Package Hub 15 SP7 | Fixed |
| openSUSE Tumbleweed | Fixed |
| SUSE Package Hub 15 SP7 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today