PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-5895 Google CVE debrief

CVE-2026-5895 is a MEDIUM severity vulnerability in Google Chrome on iOS, allowing a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name. The vulnerability is caused by incorrect security UI in Omnibox. It has a CVSS score of 5.4. The potential impact of URL spoofing can be significant, especially if attackers can deceive users into visiting malicious websites. Users should be aware of this vulnerability and take necessary precautions.

Vendor
Google
Product
Chrome
CVSS
MEDIUM 5.4
CISA KEV
Not listed in stored evidence
Original CVE published
2026-04-08
Original CVE updated
2026-07-24
Advisory published
2026-04-08
Advisory updated
2026-07-24

Who should care

Users of Google Chrome on iOS, particularly those who browse the internet on their iOS devices, should be aware of this vulnerability. Although the CVSS severity is MEDIUM, the potential impact of URL spoofing can be significant, especially if attackers can deceive users into visiting malicious websites. Operators, platform administrators, and security teams should prioritize patching and implement additional security measures.

Technical summary

The vulnerability exists in the Omnibox (URL bar) of Google Chrome on iOS versions prior to 147.0.7727.55. An attacker can exploit this vulnerability by crafting a domain name that spoofs the contents of the Omnibox, potentially leading to phishing attacks or other malicious activities. The CVSS vector for this vulnerability is CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L. Defenders should focus on verifying the authenticity of websites and implementing additional security measures.

Defensive priority

The defensive priority for this vulnerability is moderate. While the CVSS severity is MEDIUM, the potential for user deception and subsequent malicious activity necessitates prompt attention.

Recommended defensive actions

  • Update Google Chrome on iOS to version 147.0.7727.55 or later
  • Users should exercise caution when browsing the internet and verify the authenticity of websites
  • Implement additional security measures, such as using a reputable web filtering solution
  • Review compensating controls for exposed systems while remediation is scheduled and verified
  • Check relevant monitoring, detection, and logs for exposed assets that need extra review
  • Track exceptions, retest remediated assets, and close the item only after evidence is documented
  • Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record was published on 2026-04-08T22:16:29.397Z and was last modified on 2026-07-24T08:10:00.150Z. The NVD entry is currently Analyzed. The vulnerability affects Google Chrome on iOS versions prior to 147.0.7727.55. Evidence of exploitation is not currently available, but defenders should verify the authenticity of websites and exercise caution when browsing the internet.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-5895 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-5895

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-5895 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-5895

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.