CVE-2026-11272: Insufficient validation of untrusted input in Reading List in Google Chrome on iOS prior to 149

Synopsis

Insufficient input validation in the Reading List feature of Google Chrome on iOS (versions prior to 149.0.7827.53) allows a remote attacker to perform privilege escalation. Exploitation requires convincing a user to interact with a crafted HTML page through specific UI gestures, making it a network-reachable, user-assisted attack. Successful exploitation gives the attacker high-level control over confidentiality, integrity, and availability of the affected browser context. A patched-image rebuild at version 149.0.7827.53 is available on HarborGuard for environments running an affected version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker delivers a crafted HTML page over the network, so the targeted Chrome instance must be reachable or the user must browse to an attacker-controlled resource.

• AuthenticationNot required

  No account or credential is needed; the attacker operates as an anonymous remote party.

• Victim interactionRequired

  The user must be convinced to perform specific UI gestures on a crafted HTML page, requiring a social-engineering step to trigger the vulnerability.

• Attack complexityDetail

  Attack complexity is low, meaning the exploit is reliable and requires no special timing, race conditions, or environmental preconditions beyond user interaction.

Blast Radius

• A successful attacker reads sensitive browser data accessible to the Chrome process, including saved credentials, cookies, and browsing history stored within the Reading List context.
• The attacker can modify browser state or persisted data, including bookmarks, Reading List entries, and potentially injected script execution within the elevated privilege context.
• The attacker can crash or destabilize the Chrome browser process on the affected iOS device, disrupting the user's session.
• Privilege escalation means the attacker gains capabilities beyond the normal renderer sandbox, increasing the reach of any secondary payload delivered through the crafted page.