cve 2026 13939

The cve 2026 13939 tag covers guidance about a medium-severity WebShare input-validation flaw affecting Chrome for Android versions earlier than 150.0.7871.47. The reported issue could let a remote attacker who has already compromised Chrome’s renderer process use a crafted HTML page for UI spoofing. Coverage explains that it is not presented as a stand-alone browser takeover, and that no known exploitation is recorded in the current assessment. It also clarifies that Chrome on Windows is not listed as affected by the current National Vulnerability Database record. For affected Android devices, the recommended action is to update Chrome to version 150.0.7871.47 or later.