CVE-2026-13927 is a medium severity vulnerability in Google Chrome on Android where insufficient validation of untrusted input in the UI allows a local attacker to perform privilege escalation via a malicious file. The vulnerability affects versions prior to 150.0.7871.47. No CVSS score or detailed vendor remediation level is provided, but a vendor advisory URL is available for reference. There are no known exploits in the wild at this time.

A local attacker can exploit this vulnerability by providing a malicious file that bypasses input validation in the Chrome UI on Android, resulting in privilege escalation. This could allow the attacker to gain higher-level access on the affected device. No remote exploitation or widespread active exploitation has been reported.

Users should update Google Chrome on Android to version 150.0.7871.47 or later to remediate this vulnerability. Patch status is not explicitly confirmed in the advisory, so checking the vendor advisory for the latest remediation guidance is recommended.