CVE-2026-13838

MediumCVSS 6.5

Published: 30/06/2026(UTC)Updated: 02/07/2026(UTC)Translated: 03/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

8th percentile — higher than 8% of all known CVEs

Summary

An inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page.

Risk Assessment

An attacker could steal data from other websites or perform cross-site scripting attacks, posing a high risk to user data confidentiality and integrity.

Recommendation

Immediately update Google Chrome to version 150.0.7871.47 or later.

Original NVD description (English source)

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)