[CVE-2026-13813] Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 all…

Descripción técnica

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Puntuación CVSS

Score: 8.3/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Productos afectados

Chrome, Iphone os — Google, Apple

Debilidades (CWE)

CWE-20

Fuente oficial

Publicado en NIST NVD.