Chromium: CVE-2026-13930 Insufficient policy enforcement in Actor

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-13930

Insufficient policy enforcement in Actor in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13930

A vulnerability exists in the Actor component of the Chromium browser, including Google Chrome and Microsoft Edge . The flaw stems from insufficient policy enforcement at the client side, which could allow a remote attacker to bypass navigation restrictions by using a crafted HTML page . This vul...