CVE-2026-13809
Side-channel information leakage in Safe Browsing in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
Scoring
- Severity
- MEDIUM
- CVSS base score
- 6.5
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- EPSS probability
- 0.29%
- CWE
- CWE-1300
- Published
- 2026-06-30
- Last modified
- 2026-07-01
Affected products
- Google Chrome
Weakness type
Related vulnerabilities
- CVE-2026-18019 — Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote...
- CVE-2026-17978 — Side-channel information leakage in WebCodecs in Google Chrome prior to 151.0.7922.72 allowed a...
- CVE-2026-17942 — Side-channel information leakage in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote...
- CVE-2026-17914 — Side-channel information leakage in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote...
- CVE-2026-17907 — Side-channel information leakage in Network in Google Chrome prior to 151.0.7922.72 allowed a...
- CVE-2026-17859 — Inappropriate implementation in Favicons in Google Chrome prior to 151.0.7922.72 allowed a remote...
- CVE-2026-17851 — Side-channel information leakage in Autofill in Google Chrome prior to 151.0.7922.72 allowed a...
- CVE-2026-17802 — Side-channel information leakage in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed...