CVE-2026-13893

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47

Description Insufficient validation of untrusted input in the WebUI allows a remote attacker to leak cross-origin data through malicious network traffic. Cross-origin data leakage occurs when a website accesses data from a different origin than the one that served the page, bypassing the Same-Origin Policy (SOP), a security mechanism that restricts how a document or script loaded by one origin can interact with a resource from another origin.

Recommendations Update Google Chrome to version 150.0.7871.47 or later.