Live › vulnerability › CVE-2026-121186
A crafted HTML page can make fake interface elements appear in Passwords in Google Chrome on iOS, so a user may be tricked into social engineering actions. The sources rate the Chromium security severity as Medium and describe social engineering as a requirement.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 21:19 UTC. All times on this page are UTC.
People who use Google Chrome on iOS with the Passwords feature and who open a crafted HTML page, typically after being socially engineered into visiting it. Businesses managing iOS devices should check Chrome versions on managed devices. Devices on Chrome versions at or above 157.0.8103.38 are not affected.
No product ranges from the sources yet.
157.0.8103.38.157.0.8103.38 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
UI misrepresentation in Passwords in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
This page as .md · .json · in your agent: get_signal("CVE-2026-121186")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.