CVE-2026-13932

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 150.0.7871.47

Description An inappropriate implementation in the Sharing feature allows a remote attacker who has already compromised the renderer process to leak cross-origin data. This is achieved by using a crafted HTML page. Cross-origin data leakage occurs when a malicious site accesses data from a different origin, bypassing the Same-Origin Policy (SOP), which is a security mechanism that restricts how a document or script loaded by one origin can interact with a resource from another origin.

Recommendations Update Google Chrome on Android to version 150.0.7871.47 or later.