CVE Catalog
CVE-2026-13793
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.23%
14th percentile — higher than 14% of all known CVEs
Summary
Insufficient policy enforcement in SVG in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
Risk Assessment
The organization is at risk of cross-origin data leakage, potentially leading to theft of authentication credentials or other sensitive information.
Recommendation
Immediately update Google Chrome to version 150.0.7871.47 or later. Conduct a browser audit across the organization and enforce the update on all workstations.
Original NVD description (English source)
Insufficient policy enforcement in SVG in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)