CVE-2026-17841
Modified Modified - Updated After Analysis

Chrome for iOS UI Spoofing Vulnerability

Publication date: 2026-07-30

Last updated on: 2026-08-03

Assigner: Chrome

Description
Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-30
Last Modified
2026-08-03
Generated
2026-08-19
AI Q&A
2026-07-30
EPSS Evaluated
2026-08-18
NVD
CVE-2026-17841
EUVD
EUVD-2026-50590

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
google chrome to 151.0.7922.72 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-362 The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a race condition in Chrome for iOS where a remote attacker could manipulate the user interface through a specially crafted HTML page. This could lead to misleading or deceptive visual elements being displayed to the user.

Detection Guidance

This vulnerability is specific to Chrome for iOS and involves UI spoofing due to a race condition. Detection would require checking the installed version of Chrome for iOS against the patched version (151.0.7922.72). No direct network or system commands are provided in the context to detect this issue.

Impact Analysis

An attacker could trick you into thinking you are interacting with a legitimate website or dialog box when you are not. This could lead to unintended actions like entering sensitive information or downloading malicious content.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it involves a UI spoofing issue in Chrome for iOS rather than data exposure or unauthorized access. Compliance risks would depend on how the vulnerability is exploited in a specific environment.

Mitigation Strategies

Update Google Chrome for iOS to version 151.0.7922.72 or later to address the race condition vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-17841. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart