cve 2026 13927

The cve 2026 13927 tag covers a Chrome for Android input-validation vulnerability disclosed by Google on June 30, 2026. The flaw affects versions earlier than 150.0.7871.47 and may allow a local attacker to escalate privileges after a user interacts with a malicious file through the browser interface. Coverage explains why this is not a remote, drive-by browser compromise, while still carrying a serious 7.8 HIGH CVSS rating. The available assessment records no known exploitation. For Android users and enterprise defenders, the central guidance is to update Chrome to version 150.0.7871.47 or later and use the vulnerability’s risk details to prioritize remediation.