CVE-2026-11285

chromium-browser: chromium-browser: Insufficient policy enforcement in Chrome for iOS

View on CVE.org
Published Jun 4, 2026 CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Description
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

Analysis

AI-generated

Technical impact

An inappropriate implementation in Chrome for iOS versions prior to 149.0.7827.53 allows a remote attacker to craft an HTML page that mimics legitimate browser UI elements (CWE-451). The flaw enables a spoofed interface that may display deceptive content, potentially misleading users during interaction with the browser.

Affected Systems

Chrome for iOS running any build older than 149.0.7827.53 is vulnerable. The issue does not affect Chrome on desktop platforms or other browsers on iOS.

Risk and Exploitability

The CVSS score of 4.3 and an EPSS score of < 1% indicate a low likelihood of active exploitation, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is remote, requiring the victim to load a maliciously crafted web page in Chrome for iOS. While the risk of direct code execution is minimal, a deceptive interface could lead to user confusion or inadvertent interaction with malicious content, as inferred from the nature of UI spoofing.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest Chrome update to 149.0.7827.53 or newer on all iOS devices to eliminate the flaw
  • Enable Chrome’s Safe Browsing and built‑in phishing protection to provide an additional safeguard against deceptive pages
  • If an immediate update cannot be deployed, use a mobile device management policy to block or restrict access to untrusted web sites on the device

Generated by OpenCVE AI on June 6, 2026 at 01:24 UTC.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-6325-1 chromium security update
History
Type Values Removed Values Added
First Time appeared Apple
Apple iphone Os
CPEs cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*
Vendors & Products Apple
Apple iphone Os
Type Values Removed Values Added
Title chromium-browser: chromium-browser: Insufficient policy enforcement in Chrome for iOS
References
Metrics threat_severity

None

 threat_severity

Low
Type Values Removed Values Added
Title UI Spoofing via Crafted HTML Page in Chrome for iOS
Weaknesses CWE-264
CWE-79
Type Values Removed Values Added
Weaknesses CWE-451
Metrics cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome
Type Values Removed Values Added
Title UI Spoofing via Crafted HTML Page in Chrome for iOS
Weaknesses CWE-264
CWE-79
Type Values Removed Values Added
Description Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
References
Earlier changes (2)
Weaknesses
  • CWE-451

    User Interface (UI) Misrepresentation of Critical Information

Sources

Status
PUBLISHED
Assigner
Chrome
Published
Updated
Jun 5, 2026, 7:13 PM
Reserved
Jun 4, 2026, 5:11 PM

View source JSON

Updated
Jun 5, 2026, 7:13 PM

JSON

Status
Analyzed
Published
Jun 5, 2026, 12:17 AM
Modified
Jul 23, 2026, 7:10 AM

View source JSON

Severity
Low
Public date
Jun 2, 2026, 12:00 AM

View source Bugzilla JSON

Updated
Jun 6, 2026, 1:30 AM

JSON