CVE-2026-13935

MediumCVSS 6.5

Published: 30/06/2026(UTC)Updated: 01/07/2026(UTC)Translated: 02/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

22th percentile — higher than 22% of all known CVEs

Summary

Side-channel information leakage vulnerability in the ComputePressure component in Google Chrome prior to version 150.0.7871.47. A remote attacker could exploit a crafted HTML page to leak cross-origin data.

Risk Assessment

The risk involves potential theft of sensitive cross-origin data, which could lead to same-origin policy bypass and user information disclosure.

Recommendation

Immediately update Google Chrome to version 150.0.7871.47 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

Side-channel information leakage in ComputePressure in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)