CVE-2026-13894
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk11th percentile — higher than 11% of all known CVEs
Summary
Insufficient policy enforcement in the Network component of Google Chrome prior to version 150.0.7871.47 allows an attacker in a privileged network position to bypass navigation restrictions via a crafted HTML page.
Risk Assessment
An attacker on the local network or an ISP could redirect the user to a malicious page, potentially leading to data leakage or further attacks.
Recommendation
Immediately update Google Chrome to version 150.0.7871.47 or later. Ensure the update is applied to all workstations.
Original NVD description (English source)
Insufficient policy enforcement in Network in Google Chrome prior to 150.0.7871.47 allowed an attacker in a privileged network position to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)