Description
Incorrect authorization in Navigation in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Published: 2026-09-29
Score: 8.3 High
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

The vulnerability stems from incorrect authorization within Chrome's navigation handling on iOS. A remote attacker who has already compromised the renderer process can exploit a crafted HTML page, potentially executing arbitrary code outside the browser sandbox. The flaw is rated high severity with a CVSS score of 8.3.

Affected Systems

Google Chrome for iOS versions prior to 154.0.8037.57 are affected. The issue is confined to the iOS platform; desktop and other mobile versions are not impacted.

Risk and Exploitability

The CVSS score of 8.3 indicates significant risk. The EPSS score is not available and the vulnerability is not listed in CISA’s KEV catalog, suggesting limited evidence of active exploitation. Exploitation requires a local compromise of the renderer process by delivering a malicious HTML payload; the attacker must already control the renderer before breaching the sandbox.

Generated by OpenCVE AI on September 30, 2026 at 09:21 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update Chrome for iOS to version 154.0.8037.57 or later.
  • If using mobile device management, configure it to enforce automatic updates on all managed iOS devices.
  • Monitor the device for anomalous process activity or unexpected crashes indicating exploitation attempts.

Generated by OpenCVE AI on September 30, 2026 at 09:21 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-6513-1 chromium security update
History

Wed, 30 Sep 2026 16:45:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple iphone Os
CPEs cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*
Vendors & Products Apple
Apple iphone Os

Wed, 30 Sep 2026 00:15:00 +0000

Type Values Removed Values Added
Title chromium-browser: chromium-browser: Incorrect authorization in Navigation
Weaknesses CWE-653
References
Metrics threat_severity

None

 threat_severity

Important

Tue, 29 Sep 2026 21:00:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Tue, 29 Sep 2026 19:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 8.3, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 29 Sep 2026 17:45:00 +0000

Type Values Removed Values Added
Description Incorrect authorization in Navigation in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Weaknesses CWE-863
References

Subscriptions

Apple Iphone Os
Google Chrome
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-09-30T03:56:39.485Z

Reserved: 2026-09-22T05:10:32.540Z

Link: CVE-2026-95355

cve-icon Vulnrichment

Updated: 2026-09-29T18:17:53.360Z

cve-icon NVD

Status : Analyzed

Published: 2026-09-29T18:17:28.537

Modified: 2026-09-30T16:26:19.810

Link: CVE-2026-95355

cve-icon Redhat

Severity : Important

Publid Date: 2026-09-29T17:31:38Z

Links: CVE-2026-95355 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-09-30T09:30:18Z

Weaknesses
  • CWE-653

    Improper Isolation or Compartmentalization

  • CWE-863

    Incorrect Authorization