The vulnerability CVE-2026-13980 affects Google Chrome on iOS versions prior to 150.0.7871.47. It is caused by an inappropriate implementation of security UI elements that enables remote attackers to conduct UI spoofing attacks via crafted HTML content. This can trick users into interacting with deceptive interface components, potentially leading to user confusion or phishing attempts. The CVSS score is 4.3 (medium), reflecting low impact on confidentiality and availability but some impact on integrity. No official patch or remediation level is stated in the provided data, and no exploits are known in the wild. The vendor advisory URL points to a Chrome stable channel update blog but does not explicitly confirm a fix for this issue.

The vulnerability allows remote attackers to perform UI spoofing on affected Chrome for iOS versions, potentially misleading users through deceptive interface elements. There is no direct impact on data confidentiality or system availability. The integrity of the user interface is compromised, which could facilitate phishing or social engineering attacks.

Patch status is not yet confirmed—check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Users should update to Chrome for iOS version 150.0.7871.47 or later once a fix is officially released. Until then, exercise caution when interacting with untrusted web content on affected versions.