CVE-2026-13876

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47

Description An inappropriate implementation in the Network component allows an attacker in a privileged network position to bypass the content security policy (CSP), which is a security layer that helps detect and mitigate certain types of attacks, including cross-site scripting and data injection, by restricting the sources from which content can be loaded, through the use of malicious network traffic.

Recommendations Update Google Chrome to version 150.0.7871.47 or later.