CVE-2026-13919 is a vulnerability in Google Chrome affecting versions before 150.0.7871.47. It stems from insufficient policy enforcement in the browser's Extensions component, enabling an attacker who has already compromised the renderer process to bypass site isolation protections via a crafted HTML page. This vulnerability is categorized under CWE-602 (Insufficient Data Validation) and has a CVSS v3.1 base score of 6.5, indicating a medium severity level. The vulnerability does not impact confidentiality but can cause integrity loss without affecting availability. There are no known exploits in the wild at this time. The vendor advisory link is provided but does not explicitly confirm patch availability or remediation level.

The vulnerability allows an attacker with control over the renderer process to bypass site isolation, potentially leading to integrity violations within the browser environment. This could facilitate unauthorized actions or manipulation within the browser context. However, there is no direct impact on confidentiality or availability reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Users should update to version 150.0.7871.47 or later once confirmed patched. Until then, no specific mitigation steps are provided by the vendor.