CVE-2026-13992

MediumCVSS 4.2

Published: 30/06/2026(UTC)Updated: 01/07/2026(UTC)Translated: 02/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

8th percentile — higher than 8% of all known CVEs

Summary

An inappropriate implementation in the UI of Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker, after convincing a user to perform specific UI gestures, to perform UI spoofing via a crafted HTML page.

Risk Assessment

The risk involves the possibility of tricking the user regarding the authenticity of the browser interface, potentially leading to disclosure of sensitive data or execution of unwanted actions.

Recommendation

It is recommended to immediately update Google Chrome on Mac to version 150.0.7871.47 or later, which fixes this vulnerability.

Original NVD description (English source)

Inappropriate implementation in UI in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)