SUSE CVE-2026-13990

Insufficient validation of untrusted input in DataTransfer in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13990

A remote attacker who has compromised the renderer process in Google Chrome on Windows can perform UI spoofing via a crafted HTML page due to insufficient validation of untrusted input in the DataTransfer component. This vulnerability affects versions prior to 150.0.7871.47 . Exploitation details...