This vulnerability in Google Chrome on iOS arises from insufficient validation of untrusted input in the iOSWeb component. An attacker can exploit this flaw by delivering a specially crafted HTML page that triggers heap corruption. The issue affects versions prior to 150.0.7871.47. The CVSS 3.1 base score is 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), reflecting a network attack vector with low complexity, no privileges required, user interaction needed, and high impact on confidentiality, integrity, and availability. The vendor has published an advisory but has not explicitly stated the remediation level or patch availability in the provided data.

Successful exploitation can lead to heap corruption, potentially allowing an attacker to execute arbitrary code or cause a denial of service on affected devices. The vulnerability impacts confidentiality, integrity, and availability of the system. No known exploits in the wild have been reported at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Users should monitor for official updates and apply the update to version 150.0.7871.47 or later once it is confirmed available to mitigate this vulnerability.