# CVE-2026-17912: Google Chrome for iOS navigation restriction bypass

Source: https://junglewise.ai/threats/cve-2026-17912-google-chrome-for-ios-navigation-restriction-bypass  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-30. Updated: 2026-07-30  
License: CC BY 4.0 with a link back

CVE-2026-17912 · Severity: info · CVSS 3.3 · Published 2026-07-30

A vulnerability in Google Chrome for iOS could allow a malicious website to bypass standard navigation restrictions. This means a specially crafted web page could potentially redirect users or navigate to content that should otherwise be restricted by the browser's security policies. While rated as low severity, it affects the browser's ability to enforce boundaries between different web locations.

Technologies: [Google Chrome for iOS](https://junglewise.ai/threats/technologies/chrome-for-ios). Vendors: [Google](https://junglewise.ai/threats/vendors/google).

## Quick answers

**Is CVE-2026-17912 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-17912 being exploited in the wild.

**How severe is CVE-2026-17912?** Informational severity, with a CVSS score of 3.3, published 30 July 2026.

**Which products and versions are affected?** Google Chrome for iOS prior to 151.0.7922.72.

**Is there a fix for CVE-2026-17912?** A patch was published on 2026-07-29: Fixed in version 151.0.7922.72 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-17912 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-17912?** Check whether you run Google Chrome for iOS at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A navigation restriction bypass vulnerability exists in Google Chrome for iOS due to an inappropriate implementation in the browser's navigation handling logic. By enticing a user to visit a specially crafted HTML page, a remote attacker can trigger a bypass of security restrictions that govern how the browser transitions between different web origins or internal pages. The vulnerability is classified by Chromium as 'Low' severity and was addressed in version 151.0.7922.72. No evidence of exploitation in the wild was reported at the time of disclosure.

## Affected products

- Google Chrome for iOS prior to 151.0.7922.72

## Timeline

- 2026-07-29: patched: Fixed in version 151.0.7922.72
- 2026-07-30: disclosed: NVD publication date

## References

- [https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html](https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html)
- [https://issues.chromium.org/issues/504202939](https://issues.chromium.org/issues/504202939)

## Related threats

- [Google Chrome for iOS UI spoofing via crafted HTML page](https://junglewise.ai/threats/cve-2026-18013-google-chrome-for-ios-ui-spoofing-via-crafted-html-page)
- [Google Chrome for iOS UI spoofing via crafted HTML page](https://junglewise.ai/threats/cve-2026-18003-google-chrome-for-ios-ui-spoofing-via-crafted-html-page)
- [Google Chrome for iOS use after free heap corruption](https://junglewise.ai/threats/cve-2026-17967-google-chrome-for-ios-use-after-free-heap-corruption)
- [Google Chrome for iOS no-referrer policy bypass](https://junglewise.ai/threats/cve-2026-17960-google-chrome-for-ios-no-referrer-policy-bypass)
- [Google Chrome for iOS navigation restriction bypass](https://junglewise.ai/threats/cve-2026-17944-google-chrome-for-ios-navigation-restriction-bypass)