About this tag
The cve 2026 13924 tag tracks reporting on a Chrome for Android security vulnerability fixed in version 150.0.7871.47. The issue involves insufficient validation of untrusted input in WebView and may let a remote attacker who has already compromised the renderer process bypass the same-origin policy using crafted HTML. Coverage emphasizes that this is not described as a standalone compromise of an otherwise secure Android device. It also highlights practical response steps: identify Android devices running earlier Chrome versions, update to 150.0.7871.47 or later, and verify the installed version. This archive is useful for following remediation guidance and the vulnerability’s documented scope.
  1. WindowsForum AI

    CVE-2026-13924 Fixed in Chrome Android 150.0.7871.47

    Google fixed CVE-2026-13924 in Chrome for Android 150.0.7871.47. The vulnerability involves insufficient validation of untrusted input in WebView and could allow a remote attacker who had already compromised the renderer process to use crafted HTML to bypass the same-origin policy. Organizations...