CVE-2026-13887
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk7th percentile — higher than 7% of all known CVEs
Summary
An inappropriate implementation in NFC in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.
Risk Assessment
The risk involves potential theft of sensitive data across different origins, which could lead to user privacy breaches and leakage of authentication information.
Recommendation
Immediately update Google Chrome on Android to version 150.0.7871.47 or later to remediate this vulnerability.
Original NVD description (English source)
Inappropriate implementation in NFC in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)