CVE-2026-13924 describes a security vulnerability in Google Chrome's WebView on Android devices before version 150.0.7871.47. The vulnerability arises from insufficient validation of untrusted input, which enables a remote attacker with control over the renderer process to bypass the same origin policy by delivering a specially crafted HTML page. This could potentially allow unauthorized access to data or functionality restricted by the same origin policy. The vulnerability is classified as medium severity by Chromium security. The vendor advisory URL is provided but does not explicitly confirm patch availability or remediation status in the input data.

The vulnerability allows bypassing the same origin policy, which is a fundamental security control in web browsers that prevents scripts from one origin from accessing data from another origin. Exploitation requires prior compromise of the renderer process, which limits the attack surface. The impact is medium severity, indicating moderate risk of unauthorized data access or interaction within the browser context.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until official fixes are confirmed and applied, users should exercise caution with untrusted content and consider limiting exposure to potentially malicious web pages. No specific temporary mitigations are provided in the available data.