CVE-2026-13897

CVE-2026-13897 describes insufficient policy enforcement in Chromecast within Google Chrome prior to version 150.0.7871.47, allowing a remote attacker to escalate privileges via a crafted HTML page. The affected component is Chromecast in Chrome; root cause is policy enforcement weakness. The vul...