CVE-2026-13826
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk7th percentile — higher than 7% of all known CVEs
Summary
An inappropriate implementation in Autofill in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. The issue is rated as high severity.
Risk Assessment
An attacker could steal sensitive user data, such as autofill information, from other origins, leading to privacy breaches and potential identity theft.
Recommendation
Immediately update Google Chrome on Android to version 150.0.7871.47 or later to remediate the vulnerability.
Original NVD description (English source)
Inappropriate implementation in Autofill in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)