CVE-2026-13932
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk21th percentile — higher than 21% of all known CVEs
Summary
An inappropriate implementation in the Sharing feature in Google Chrome on Android prior to version 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. The issue is rated as Medium severity in Chromium.
Risk Assessment
An attacker could exploit this vulnerability to steal cross-origin sensitive data, posing a risk to user privacy and potentially leading to the leakage of authentication credentials or other confidential information.
Recommendation
Immediately update Google Chrome on Android to version 150.0.7871.47 or later to remediate the vulnerability. It is also recommended to enforce renderer process isolation mechanisms.
Original NVD description (English source)
Inappropriate implementation in Sharing in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)