Is CVE-2026-91742 being exploited?

No public exploit is currently tracked.

Back

CVE-2026-91742

Description

Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions into a privileged page via crafted network traffic. (Chromium security severity: Medium)