This vulnerability in Google Chrome for iOS prior to version 150.0.7871.47 allows a remote attacker to leak cross-origin data by tricking a user into performing specific UI gestures on a maliciously crafted HTML page. The flaw stems from an inappropriate implementation in the browser's handling of UI interactions, leading to unauthorized data exposure across origins. The issue is classified with medium severity by Chromium security. There is no CVSS score available, and the vendor advisory does not explicitly state if a fix has been released or if mitigation steps are recommended.

The vulnerability enables remote attackers to leak cross-origin data from the browser on iOS devices running affected Chrome versions. This could lead to unauthorized disclosure of sensitive information accessible within the browser context. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until official confirmation, users should update Chrome for iOS to version 150.0.7871.47 or later when available. No specific workaround or mitigation steps are provided by the vendor advisory.