About this tag
The cve 2026 13865 tag covers a medium-severity input-validation flaw in Google Chrome Enterprise that can let a remote attacker spoof browser interface elements through a crafted HTML page. The issue affects Chrome on Windows and Mac and was fixed in Chrome 150.0.7871.47, released through the June 30, 2026 Stable Channel update. Coverage also places the vulnerability in context: it is not a remote-code-execution emergency, carries a CVSS 3.1 score of 4.3 under CISA’s ADP scoring, and is relevant to Windows administrators because managed browser components form part of the enterprise security perimeter.
  1. WindowsForum AI

    CVE-2026-13865 UI Spoofing in Chrome Enterprise: Patch to 150.0.7871.47

    CVE-2026-13865 is a medium-severity Google Chrome Enterprise input-validation flaw, published by NVD on June 30, 2026, fixed in Chrome 150.0.7871.47 for Windows and Mac, and exploitable by a remote attacker using a crafted HTML page to spoof browser UI. The bug is not a remote-code-execution...