CVE-2026-102305: Medium severity Google Chrome for iOS vulnerability
Published Sep 29, 2026
·Updated
UI misrepresentation in SignIn in Google Chrome on on iOS prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
Affected Software
1 affected component
Google Chrome for iOS<154.0.8037.92
Event History
Sep 29, 2026
CVE Published
via MITRE·07:45 PM
Data Sourced
via MITRE·07:45 PM
DescriptionWeakness
Data Sourced
via NVD·08:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which Chrome for iOS versions need to be updated?
Google Chrome for iOS versions prior to 154.0.8037.92 are affected. Update to 154.0.8037.92 or later.
2
What does an attacker need to exploit this issue?
The attacker needs to cause a user to view a crafted HTML page remotely. The issue allows spoofing of UI elements in the SignIn interface.
3
How severe is this issue according to Chromium?
Chromium rates this issue as Low severity.