CVE-2026-13896
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk15th percentile — higher than 15% of all known CVEs
Summary
Insufficient policy enforcement in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. The vulnerability has a medium severity rating according to Chromium.
Risk Assessment
An attacker could exploit this vulnerability to bypass navigation restrictions, potentially leading to unauthorized access to pages or user data. The risk is medium but could be leveraged in phishing or social engineering campaigns.
Recommendation
Immediately update Google Chrome to version 150.0.7871.47 or later. It is also recommended to enable automatic updates for all users.
Original NVD description (English source)
Insufficient policy enforcement in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)