CVE-2026-13931 is a medium severity vulnerability in Google Chrome on Windows platforms before version 150.0.7871.47. It involves an inappropriate implementation in the Media component that enables a remote attacker, who has already compromised the renderer process, to conduct UI spoofing attacks using a crafted HTML page. This could potentially mislead users by displaying deceptive user interface elements. The vulnerability was published on June 30, 2026, and is documented by Google with a vendor advisory link. However, explicit patch or remediation status is not confirmed in the provided data.

The vulnerability allows an attacker with control over the renderer process to perform UI spoofing, which can deceive users into interacting with malicious or misleading interface elements. This may facilitate social engineering attacks or trick users into performing unintended actions. There is no indication of direct code execution or privilege escalation from the provided information.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Users and administrators should monitor official Google Chrome release notes and apply updates promptly once a fix is confirmed.