CVE-2026-10958 is a use-after-free vulnerability affecting Google Chrome on iOS before version 149.0.7827.53. Exploitation requires user interaction involving specific UI gestures on a maliciously crafted HTML page, potentially enabling remote code execution. The vulnerability is classified as high severity with a CVSS 3.1 base score of 8.8, indicating network attack vector, low attack complexity, no privileges required, user interaction needed, and high impact on confidentiality, integrity, and availability. There is no explicit vendor advisory stating patch availability or remediation level, but the affected version is prior to 149.0.7827.53, implying that updating to this version or later mitigates the issue.

Successful exploitation allows remote attackers to execute arbitrary code on the victim's device, compromising confidentiality, integrity, and availability of the system. The attack requires user interaction but no privileges or prior access, making it a significant risk for affected users.

Users should update Google Chrome on iOS to version 149.0.7827.53 or later to remediate this vulnerability. The vendor advisory linked does not explicitly confirm patch status, but the affected version information indicates that the fix is included in 149.0.7827.53. Patch status is not yet confirmed explicitly by the vendor advisory; therefore, users should verify the update availability and apply it promptly.