cve 2026 13995

The cve 2026 13995 tag covers a medium-severity security vulnerability in Chrome for Android’s Autofill component. Before version 150.0.7871.47, a remote attacker could use a specially crafted HTML page to spoof browser interface elements and mislead a user into taking an unintended action. The reported issue is limited to UI spoofing and is not described as password theft, a sandbox escape, or remote code execution. Related guidance focuses on updating Chrome Android promptly, checking the installed browser version, and avoiding assumptions that an older version confirms compromise. This archive provides focused coverage of the vulnerability and the available update guidance.