Executive brief
A security vulnerability exists in the Autofill feature of Google Chrome for iOS. An attacker could trick a user into performing specific touch gestures on a malicious website to trigger a memory error. This could allow the attacker to potentially crash the browser or execute unauthorized code on the device.
Technical details
A use-after-free (UAF) vulnerability exists in the Autofill component of Google Chrome for iOS prior to version 149.0.7827.53. The flaw is triggered when a user is convinced to perform specific UI gestures on a malicious HTML page, leading to heap corruption. This vulnerability class (CWE-416) typically occurs when the application continues to use a pointer after the memory it points to has been freed, which can be leveraged by a remote attacker for arbitrary code execution or a denial-of-service (DoS) attack. Google has addressed this issue in the stable channel update 149.0.7827.53.
Affected products
- Google Chrome for iOS prior to 149.0.7827.53
Timeline
- 2026-06-02: patched: Chrome 149.0.7827.53 released to stable channel.
- 2026-06-04: disclosed: CVE-2026-10951 published.