SUSE CVE-2026-13951

Insufficient policy enforcement in USB in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

Chromium: CVE-2026-13951 Policy bypass in USB

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-13951

A policy bypass flaw in the USB component of the Chromium browser (including Google Chrome and Microsoft Edge ) was identified. The root cause is an insufficient policy enforcement in USB settings, which could allow a remote attacker to perform a sandbox escape via a crafted HTML page if they hav...