A local attacker who can physically access an iOS device can exploit a flaw in Google Chrome that leaks sensitive information. The vulnerability is classified as CWE‑200, Information Exposure. While the Chromium security severity is listed as Low, the ability to read private data can affect user privacy and data integrity if the attacker manages to intercept user activity or stored credentials.

Users running Google Chrome on iOS devices with a build prior to 155.0.8059.39 are affected. Any installation of Chrome on iOS before the 155.0.8059.39 update may leak sensitive information when a local attacker has physical access to the device.

The exploit requires local, physical access and does not enable remote execution or further system compromise. The CVSS score of 4.6 indicates low overall risk, and the EPSS score is not available. The vulnerability is not listed in the CISA KEV catalog. Consequently, the risk remains low in terms of exploit likelihood, yet the potential privacy impact warrants immediate remediation.