This vulnerability in Google Chrome for iOS versions before 150.0.7871.47 stems from insufficient validation of untrusted input. A local attacker can exploit this flaw by crafting a malicious file that, when processed by the browser, leads to arbitrary code execution inside the sandbox. The issue was assigned CVE-2026-13850 and is classified with high severity by Chromium security. The vendor advisory link is provided but does not explicitly confirm patch availability or remediation steps.

Successful exploitation allows a local attacker to execute arbitrary code within the sandboxed environment of Chrome on iOS. This could lead to unauthorized actions within the browser context but does not indicate escalation beyond the sandbox or remote exploitation. No known exploits in the wild have been reported at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until official fixes are confirmed, users should exercise caution when handling untrusted files in Chrome on iOS. No vendor advisory states that no action is required or that the issue is already mitigated.