CVE Catalog
CVE-2026-13927
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk0.12%
2th percentile — higher than 2% of all known CVEs
Summary
Insufficient validation of untrusted input in the UI in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to perform privilege escalation via a malicious file.
Risk Assessment
The organization faces the risk of privilege escalation by a local attacker, potentially leading to unauthorized access to sensitive data or systems.
Recommendation
Immediately update Google Chrome on Android to version 150.0.7871.47 or later to remediate the vulnerability.
Original NVD description (English source)
Insufficient validation of untrusted input in UI in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: Medium)