CVE-2026-13893 is a vulnerability in Google Chrome's WebUI component where insufficient validation of untrusted input allows a remote attacker to leak cross-origin data via malicious network traffic. This vulnerability affects Chrome versions prior to 150.0.7871.47. The CVSS 3.1 base score is 6.5, indicating medium severity, with an attack vector of network, low attack complexity, no privileges required, user interaction required, unchanged scope, and high confidentiality impact. No official remediation level or patch link is provided in the input data, but a vendor advisory URL is available for reference.

The vulnerability enables remote attackers to leak sensitive cross-origin data, potentially exposing confidential information from other origins within the browser context. There is no impact on integrity or availability reported. The medium severity reflects the confidentiality risk without direct code execution or denial of service.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Since no explicit patch or remediation level is stated, users and administrators should monitor official Google Chrome release notes and update to version 150.0.7871.47 or later once confirmed fixed.