CVE-2026-13931 is a medium severity vulnerability in Google Chrome on Windows platforms before version 150.0.7871.47. It arises from an inappropriate implementation in the Media component that enables a remote attacker, who has already compromised the renderer process, to conduct UI spoofing attacks by delivering a crafted HTML page. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. There is no explicit vendor advisory stating a patch or remediation level, but the affected versions are those prior to 150.0.7871.47, implying that updating to this version or later mitigates the issue.

The vulnerability allows an attacker with control over the renderer process to perform UI spoofing, potentially misleading users by presenting deceptive user interface elements. This impacts the integrity of the user interface but does not affect confidentiality or availability. There are no known exploits in the wild at this time.

Users should update Google Chrome on Windows to version 150.0.7871.47 or later to remediate this vulnerability. Since the vendor advisory URL indicates a stable channel update, applying this update is the recommended official fix. No additional mitigation steps are specified or required.