This vulnerability in Google Chrome for iOS is caused by insufficient validation of untrusted input, enabling a remote attacker to leak cross-origin data through a specially crafted HTML page. The issue affects Chrome on iOS versions before 150.0.7871.47. The CVSS vector indicates the attack requires network access, low attack complexity, no privileges, and user interaction, with a high impact on confidentiality but no impact on integrity or availability. No official patch or remediation level is explicitly stated in the vendor advisory link provided.

The vulnerability allows remote attackers to leak sensitive cross-origin data, potentially exposing confidential information from other origins. The impact is limited to confidentiality and does not affect integrity or availability. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Users should update to Chrome for iOS version 150.0.7871.47 or later once confirmed. Until then, exercise caution when interacting with untrusted web content on affected versions.