cve 2026 13955

CVE 2026 13955 is discussed here as a Chrome for Android security issue involving a CustomTabs input-validation flaw. Based on the available information, a local attacker could use a malicious file to create a UI-spoofing scenario. The affected versions are Chrome for Android releases before 150.0.7871.47, and that version is identified as the published fix threshold. Users and administrators should update Chrome on Android and verify that the installed version is 150.0.7871.47 or later. The available material does not establish that Chrome on Windows is affected, so this tag focuses on the Android product and the stated vendor correction rather than broader platform claims.