CVE-2026-91742

Summary

Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions into a privileged page via crafted network traffic. (Chromium security severity: Medium)

Affected Software

VendorProductVersion RangeStatus
GoogleChrome153.0.8010.47 < 153.0.8010.47affected

Weaknesses

  • CWE-441: Confused deputy

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References