URL Spoofing Vulnerability in Google Chrome for iOS
CVE-2026-14128

Currently unrated

Key Information:

Vendor: Google
Status: Chrome
Vendor: CVE Published:; 30 June 2026

What is CVE-2026-14128?

A vulnerability in Google Chrome for iOS allows a remote attacker to manipulate the Omnibox, or URL bar, through a specially crafted HTML page. This could lead to impersonation, where users are misled into believing they are on a legitimate site, potentially compromising sensitive information.

Affected Version(s)

Chrome 150.0.7871.47

References

https://chromereleases.googleblog.com/2026/06/stable-chan...

https://issues.chromium.org/issues/514015836

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jun 30, 2026
Vulnerability Reserved
Jun 29, 2026

CVE-2026-14128 Data

JSON