cve 2026 13936

The cve 2026 13936 tag covers a medium-severity security flaw affecting Google Chrome on Android versions earlier than 150.0.7871.47. The issue is associated with Chrome’s Passwords implementation and may allow a remote attacker to use crafted HTML to obtain potentially sensitive information from browser process memory after user interaction. Current coverage focuses on the limits of what is publicly established, including the absence of evidence that attackers can directly download saved-password databases or reliably recover specific credentials. For users and administrators, the key action is to update Chrome Android to version 150.0.7871.47 and verify the installed version rather than relying on an assumed automatic update.