CVE-2026-91742 is a confused deputy vulnerability in the PriceTracking feature of Google Chrome on iOS before version 153.0.8010.47. It enables a remote attacker, through social engineering and specially crafted network traffic, to bypass system access controls and gain access to a privileged page within the browser. The vulnerability was publicly disclosed with a medium severity rating by the Chromium security team. The vendor advisory URL is provided but does not explicitly state patch availability in the input data.

An attacker can bypass system access restrictions to reach a privileged page in Chrome on iOS, potentially exposing sensitive functionality or data accessible only to privileged contexts. The attack requires social engineering and crafted network traffic but does not indicate direct code execution or broader system compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The provided vendor advisory link should be monitored for updates on official fixes or mitigations. Until a patch is confirmed, users should exercise caution with unsolicited network content and social engineering attempts targeting Chrome on iOS.