CVE-2026-13809 is a side-channel information leakage vulnerability in Google Chrome's Safe Browsing on iOS platforms before version 150.0.7871.47. An attacker with control over the renderer process can exploit this vulnerability by using a specially crafted HTML page to leak data across origins. The vulnerability is rated with a CVSS 3.1 base score of 6.5 (medium severity), reflecting a network attack vector with low attack complexity, no privileges required, user interaction needed, and high confidentiality impact but no integrity or availability impact. The vulnerability is publicly known and published, but no explicit remediation or patch details are provided in the input data. The vendor advisory URL is given but does not specify patch status within the provided information.

An attacker who has compromised the renderer process in affected versions of Google Chrome on iOS can leak sensitive cross-origin data via a crafted HTML page. This compromises confidentiality but does not affect integrity or availability. The vulnerability requires user interaction and network access but no privileges or elevated access. There are no known exploits in the wild as per the provided data.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until official confirmation, users should consider updating to version 150.0.7871.47 or later if available, as the affectedVersions field suggests this version is relevant. No other specific mitigations are indicated in the provided data.