CVE-2026-13824

Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. Chromium security severity: High...

CVE-2026-13867

CVE-2026-13867 affects Google Chrome prior to 150.0.7871.47 due to an inappropriate implementation in Geolocation, allowing a remote attacker to perform UI spoofing via a crafted HTML page. The issue is described as a Chromium-level vulnerability (severity: Medium). Remediation: update to Chrome ...