Question 1

What is CVE-2026-13872 — CVE-2026-13872?

Accepted Answer

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to potentially perform a sandbox escape via a malicious file. (Chromium security severity: Medium)

Question 2

What is the authoritative source for CVE-2026-13872?

Accepted Answer

CVE-2026-13872 (CVE-2026-13872) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-13872CVE-2026-13872

Description

Scoring