Confused Deputy Vulnerability in Google Chrome on iOS

CVE-2026-91742

What is CVE-2026-91742?

A vulnerability in Google Chrome for iOS allows remote attackers to exploit a confused deputy scenario. By leveraging social engineering, attackers can craft specific network traffic to bypass system access restrictions and gain unintended access to privileged pages. This vulnerability affects versions of Google Chrome prior to 153.0.8010.47, making it crucial for users to update their browsers to maintain security and protect sensitive information.

References