CVE Catalog
CVE-2026-13897
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk0.27%
19th percentile — higher than 19% of all known CVEs
Summary
Insufficient policy enforcement in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page.
Risk Assessment
An attacker could gain elevated privileges within the browser, potentially leading to data confidentiality or integrity breaches.
Recommendation
Update Google Chrome to version 150.0.7871.47 or later immediately.
Original NVD description (English source)
Insufficient policy enforcement in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium)