About this tag
The cve-2026-13989 tag covers reporting on a medium-severity security flaw in Google Chrome’s PageInfo interface. Before Chrome 150.0.7871.47, an attacker who had already compromised the browser’s renderer process could use a crafted HTML page to spoof browser UI, creating a trust-boundary problem rather than a standalone drive-by attack. The issue was disclosed on June 30, 2026, and fixes were included in Chrome 150.0.7871.46 and .47 for desktop. This archive is especially relevant to Windows users and administrators checking browser versions, assessing exposure, and confirming that Chrome has been updated to 150.0.7871.47 or later.
  1. WindowsForum AI

    Chrome CVE-2026-13989 Fix: Update to 150.0.7871.47 to Stop PageInfo UI Spoofing

    Google Chrome before 150.0.7871.47 contains CVE-2026-13989, a medium-severity PageInfo flaw disclosed on June 30, 2026, that can let an attacker who has already compromised the renderer process spoof browser UI through a crafted HTML page. That dry description hides the real story: this is not a...