CVE-2026-13930

MediumCVSS 6.5

Published: 30/06/2026(UTC)Updated: 01/07/2026(UTC)Translated: 02/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

24th percentile — higher than 24% of all known CVEs

Summary

Insufficient policy enforcement in the Actor component in Google Chrome prior to 150.0.7871.47 allows a remote attacker to bypass navigation restrictions via a crafted HTML page. The vulnerability has a medium severity rating according to Chromium.

Risk Assessment

An attacker could exploit this vulnerability to redirect users to unauthorized pages, potentially leading to data leakage or further phishing attacks.

Recommendation

Immediately update Google Chrome to version 150.0.7871.47 or later to remediate the vulnerability.

Original NVD description (English source)

Insufficient policy enforcement in Actor in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)