CVE-2026-13839 is a vulnerability in Google Chrome's CSS implementation before version 150.0.7871.47 that enables remote attackers to bypass the same origin policy. This bypass can be triggered by a crafted HTML page, potentially allowing unauthorized interactions with web content from different origins. The vulnerability is classified under CWE-346 (Origin Validation Error) and has a CVSS 3.1 base score of 6.5, indicating medium severity. No known exploits are reported in the wild. The vendor advisory linked does not explicitly confirm the availability of a patch or remediation level.

The vulnerability allows an attacker to bypass the same origin policy, which could lead to unauthorized modification or interaction with web content from different origins. This impacts the integrity of web applications by potentially allowing cross-origin attacks. Confidentiality and availability impacts are not indicated.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution when visiting untrusted websites and consider using updated browser versions once available.