CVE-2026-13816 is a high severity vulnerability affecting Google Chrome on Android versions before 150.0.7871.47. It involves insufficient validation of untrusted input in the File Input functionality, which can be exploited by a remote attacker to leak cross-origin data through a specially crafted HTML page. The vulnerability was published on June 30, 2026, and is documented by Google with a vendor advisory link. However, no explicit patch or remediation details are provided in the input data.

The vulnerability allows a remote attacker to bypass same-origin policy protections by leaking data across origins via crafted HTML content. This could lead to unauthorized disclosure of sensitive information accessible in the browser context. The severity is rated high by Chromium security, indicating significant risk if exploited.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. No explicit remediation level or patch availability is stated in the provided data. Users and administrators should monitor official Google Chrome release notes and update to version 150.0.7871.47 or later once confirmed patched.