EUVD-2026-40669
GHSA-vjqp-w4wv-vwj4
Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Network-delivered via crafted page (AV:N, AC:L), no auth needed (PR:N), user must visit page (UI:R), only UI integrity is affected with no scope change or confidentiality/availability impact.
Primary rating from Vendor (google).
CVSS VectorVendor: google
Lifecycle Timeline
4DescriptionCVE.org
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
AnalysisAI
UI spoofing in Google Chrome for iOS prior to version 150.0.7871.47 enables a remote attacker to misrepresent page identity or security state through a specially crafted HTML page, exploiting an inappropriate implementation classified under CWE-451. The vulnerability affects only the iOS-specific Chrome codebase - not Chrome on other platforms - and requires user interaction (visiting an attacker-controlled page). No public exploit code has been identified and EPSS sits at 0.21% (11th percentile), indicating low observed exploitation probability; it is not listed in the CISA KEV catalog.
Technical ContextAI
CWE-451 (User Interface Misrepresentation of Critical Information) describes flaws where the UI fails to accurately convey security-relevant state to the user, enabling deception about the origin, identity, or trust level of displayed content. Chrome on iOS operates under Apple's WebKit/WKWebView constraints, which introduces platform-specific implementation paths diverging from the Chromium baseline on other OSes. The 'inappropriate implementation' designation from the Chromium security team indicates the flaw lies in how Chrome's iOS layer renders or handles UI chrome elements - likely the address bar, security lock indicator, or origin display - such that crafted HTML can influence their visual presentation. The affected CPE covers all Chrome for iOS versions below 150.0.7871.47, as indicated by the EUVD entry (Chrome 150.0.7871.47 < 150.0.7871.47). The Chromium issue tracker reference (issues.chromium.org/issues/513990408) may contain additional technical detail but is typically access-controlled at the time of disclosure.
RemediationAI
Update Google Chrome on iOS to version 150.0.7871.47 or later via the Apple App Store. The patch is confirmed available per the vendor's stable channel advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html. If an immediate update is not possible, the most effective compensating control is to avoid navigating to untrusted links in Chrome on iOS and instead use Safari or another browser while the patch is applied - this eliminates exposure to this specific implementation flaw. Organizations managing iOS fleets via MDM should push the Chrome update through their mobile management platform. No trade-off is incurred by upgrading to 150.0.7871.47 as it is a stable channel release.
Same technique Information Disclosure
View allVendor StatusVendor
SUSE
Severity: Moderate| Product | Status |
|---|---|
| SUSE Package Hub 15 SP7 | Fixed |
| openSUSE Tumbleweed | Fixed |
| SUSE Package Hub 15 SP7 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today