Upstream information

CVE-2026-91742 at MITRE

Description

Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions into a privileged page via crafted network traffic. (Chromium security severity: Medium)

SUSE information

Overall state of this security issue: New

This issue is currently rated as having critical severity.

SUSE Bugzilla entry: 1280687 [NEW]

No SUSE Security Announcements cross referenced.


SUSE Timeline for this CVE

CVE page created: Wed Sep 16 13:10:23 2026
CVE page last modified: Wed Sep 16 13:10:23 2026