CVE-2026-13024

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.197

Description Insufficient validation of untrusted input in the Navigation component allows a remote attacker who has already compromised the renderer process to bypass site isolation. This is achieved through the use of a crafted HTML page. Site isolation is a security feature that ensures pages from different sites are run in separate processes to prevent data theft.

Recommendations Update Google Chrome to version 149.0.7827.197 or later.