Description
Inappropriate implementation in NFC in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
Published:
2026-06-30
Score:
n/a
EPSS:
< 1% Very Low
KEV:
No
Impact:
n/a
Action:
n/a
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
References
History
Wed, 01 Jul 2026 12:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Cross‑Origin Data Leakage via NFC Handler in Google Chrome for Android | |
| First Time appeared |
Google
Google chrome |
|
| Vendors & Products |
Google
Google chrome |
Wed, 01 Jul 2026 08:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Renderer Process Compromise Allows Cross‑Origin Data Leakage in Chrome Android | |
| Weaknesses | CWE-200 |
Wed, 01 Jul 2026 01:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Renderer Process Compromise Allows Cross‑Origin Data Leakage in Chrome Android | |
| Weaknesses | CWE-200 |
Tue, 30 Jun 2026 23:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Inappropriate implementation in NFC in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) | |
| References |
|
Status: PUBLISHED
Assigner: Chrome
Published:
Updated: 2026-06-30T22:38:09.699Z
Reserved: 2026-06-29T23:03:42.521Z
Link: CVE-2026-13887
No data.
No data.
No data.
OpenCVE Enrichment
Updated: 2026-07-01T12:30:17Z
Weaknesses
No weakness.