PT-2026-54261 · Google · Google Chrome

CVE-2026-13985

·

Published

2026-05-17

·

Updated

2026-08-31

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:N/I:C/A:N
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47
Description An inappropriate implementation in the MediaCapture component allows a remote attacker who has already compromised the renderer process to perform UI spoofing. This is achieved by using a specially crafted HTML page to deceive the user through the user interface.
Recommendations Update Google Chrome to version 150.0.7871.47 or later.

Fix

UI Misrepresentation of Critical Information

Authentication Bypass by Spoofing

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-13435
CVE-2026-13985
ECHO-B68D-9E8D-8324
OPENSUSE-SU-2026:11184-1
OPENSUSE-SU-2026:21279-1
OPENSUSE-SU-2026:21498-1

Affected Products

Google Chrome