CVE-2026-13999

Name: CVE-2026-13999 — Vulnerability Record
Brand: Quanteta Data Lab
SKU: CVE-2026-13999

No CVSS score published

Vendor advisory ref

Source data as of: 2026-07-01 05:03:33 UTC

At a glance

Severity: No CVSS score published
CVSS: No CVSS score in the NVD record
EPSS: EPSS not provided by FIRST.org for this CVE
CISA KEV: No
Published: 2026-06-30 · Modified: 2026-06-30
References: Jump to references (2)

CVSS / EPSS / KEV

EPSS — EPSS not provided by FIRST.org for this CVE Source: FIRST.org

CISA KEV No Source: CISA

Source — CVSS: NVD · EPSS: FIRST.org · KEV: CISA. Data & Sources

Description

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Medium)

Record details

CVE ID: CVE-2026-13999
CISA KEV: No
Affected configurations (CPE): 0
Published: 2026-06-30
Modified: 2026-06-30
Status: Received

References

Reference URLs as listed by NVD, grouped by a mechanical match on the link's host/pattern. Labels describe the link type only.

Vendor advisory https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312…
Reference https://issues.chromium.org/issues/514071697

← Back to all records