PT-2026-54067

CVE-2026-13790

Published

2025-11-04

Updated

2026-09-15

Description by

CVSS 2.0

7.8

High

MetricsAV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47

Description A side-channel information leakage issue exists in the Scroll component. This flaw allows a remote attacker to leak cross-origin data, which is data belonging to a different origin than the one serving the malicious page, by using a specially crafted HTML page.

Recommendations Update Google Chrome to version 150.0.7871.47 or later.

Exploitability

Fix

Researchers

Jorian Woltjer

Slonser

Vsevolod Kokorin

Vendors

Affected products

Weakness enumeration

CWE-1300: Improper Protection of Physical Side Channels

Related identifiers