CVE-2026-13795

Description

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: High)

References

https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html

https://issues.chromium.org/issues/476591032

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-40481

Details

Source: Mitre, NVD

Named Vulnerability: GHSA-7gfw-2mp7-38w5

Risk Information

CVSS v2

CVSS v3

EPSS