PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-17941 Google CVE debrief

CVE-2026-17941 is a medium-severity vulnerability in Google Chrome for iOS prior to version 151.0.7922.72. An attacker can spoof the URL bar via a crafted HTML page. Defenders should assess exposure, particularly for iOS users of Google Chrome. This vulnerability allows for the spoofing of the URL bar, which can lead to phishing attacks. Defenders need to verify and update Google Chrome for iOS to prevent exploitation. Successful exploitation requires user interaction with a crafted HTML page.

Vendor
Google
Product
Chrome
CVSS
MEDIUM 4.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-07-30
Original CVE updated
2026-10-23
Advisory published
2026-07-30
Advisory updated
2026-10-23

Who should care

Defenders responsible for managing Google Chrome for iOS deployments should assess exposure and ensure updates are applied. This includes IT administrators, security teams, and anyone responsible for maintaining Google Chrome for iOS in their organization. They should verify the version of Google Chrome for iOS in their environment and ensure it is updated to version 151.0.7922.72 or later.

Why it matters

CVE-2026-17941 is a medium-severity vulnerability in Google Chrome for iOS that allows spoofing of the URL bar. Defenders should assess exposure, particularly for iOS users of Google Chrome, and ensure updates to version 151.0.7922.72 or later are applied.

  • Spoofing of the URL bar can lead to phishing attacks
  • Defenders need to verify and update Google Chrome for iOS to prevent exploitation
  • Successful exploitation requires user interaction with a crafted HTML page

Technical summary

A remote attacker can spoof the contents of the Omnibox (URL bar) in Google Chrome for iOS prior to version 151.0.7922.72 via a crafted HTML page. This vulnerability affects Google Chrome for iOS and requires user interaction with a crafted HTML page to exploit. Defenders should prioritize verifying iOS Google Chrome versions and ensuring updates to version 151.0.7922.72 or later are applied.

Defensive priority

Defenders should prioritize verifying iOS Google Chrome versions and ensuring updates to version 151.0.7922.72 or later are applied.

Recommended defensive actions

  • Verify and update Google Chrome for iOS to version 151.0.7922.72 or later
  • Monitor for crafted HTML pages attempting to spoof the URL bar
  • Assess exposure for iOS users of Google Chrome

Evidence notes

The CVE record and NVD entry provide details on the vulnerability. However, specific details on exploitation are limited. The vulnerability affects Google Chrome for iOS prior to version 151.0.7922.72. Defenders should verify the version of Google Chrome for iOS in their environment and ensure it is updated to version 151.0.7922.72 or later. The CVE record was published on 2026-07-30T01:16:58.383Z and has not been modified since then.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-17941 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-17941

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-17941 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-17941

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.