VULNERABILITY INTELLIGENCE

CVE-2026-13839

CVSS score6.5 MEDIUM

EPSS probability0.24%

CISA KEVNot currently listed

Published2026-06-30

Last modified2026-10-25

Description

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)