Threat Intelligence Database

CVE-2026-18003 is a vulnerability in Google Chrome for iOS versions prior to 151.0.7922.72 that allows a remote attacker to perform UI spoofing via a crafted HTML page. The issue is classified as low severity by Chromium security but has a CVSS score of 4.3, indicating a medium severity level. This vulnerability involves an inappropriate implementation that could mislead users by spoofing the user interface. No known exploits are reported in the wild. There is no explicit vendor advisory confirming a patch, but the affected version is prior to 151.0.7922.72, implying that updating to this version or later addresses the issue.

CVE-2026-17972 is a vulnerability in Google Chrome for iOS versions prior to 151.0.7922.72 that allows remote attackers to perform UI spoofing via a crafted HTML page. The issue is due to an inappropriate implementation in Chrome for iOS. The vulnerability has a CVSS score of 4.3, indicating medium severity. There is no explicit vendor advisory stating a patch or remediation level, and no known exploits in the wild have been reported.

CVE-2026-17941 is a vulnerability in Google Chrome for iOS versions prior to 151.0.7922.72 that allows a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. The issue is classified with a low security severity by Chromium and has a CVSS score of 4.3, indicating medium severity. This vulnerability could mislead users about the actual URL they are visiting, potentially facilitating phishing or other social engineering attacks. There is no explicit vendor advisory stating a patch or fix, but the affected versions are all versions before 151.0.7922.72. No known exploits are reported in the wild.

CVE-2026-17913 is a vulnerability in Google Chrome for iOS versions prior to 151.0.7922.72. It involves an inappropriate implementation that allows a remote attacker to perform UI spoofing via a crafted HTML page. The vulnerability has a CVSS score of 5.4, indicating medium severity. No known exploits are reported in the wild. No explicit patch link is provided, but the affected versions indicate that version 151.0.7922.72 is the fixed version.

Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

Use after free in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)