CVE-2026-13897 - Vulnerability Details

Description

Insufficient policy enforcement in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium)

Published: 2026-06-30

Score: 8.8 High

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

Chromium’s Chromecast integration in Google Chrome lacks proper policy enforcement, allowing a remote attacker to perform privilege escalation by delivering a specially crafted HTML page. The flaw enables the attacker to bypass the expected access controls within the Chrome process, potentially executing code that runs with higher privileges than the normal browser context. Based on the description, it is inferred that the attacker must create and persuade the victim to open the malicious HTML page in Chrome, triggering the exploit.

Affected Systems

Google Chrome versions earlier than 150.0.7871.47 on all platforms where Chrome includes Chromecast support (Windows, macOS, Linux).

Risk and Exploitability

The CVSS score of 8.8 indicates a high severity. The EPSS score of < 1 % shows that the likelihood of exploitation in the wild is very low, and the vulnerability is not listed in CISA KEV. The attack requires the victim to open a crafted HTML page in Chrome, which is a plausible scenario for phishing or drive‑by‑download attacks. The likely attack vector is remote delivery of a malicious HTML file, and it is inferred that the attacker would need the victim to enable or view the Chromecast feature in the browser.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Google

Chrome

affected

Version	Status	Constraints
`150.0.7871.47`	affected	< 150.0.7871.47

No data.

Vendor Product Confidence Versions

Google

Chrome

95%

Version	Status	Scheme	Platform
`[0,150.0.7871.47)`	affected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

Upgrade Google Chrome to version 150.0.7871.47 or later using the official update channel.
Enable Chrome automatic updates or enforce updates through enterprise policy to ensure timely patching across all systems.
Use a centralized update management system to apply Chrome patches promptly.

Generated by OpenCVE AI on August 3, 2026 at 06:41 UTC.

Tracking

Sign in to view the affected projects.

Advisories

Source	ID	Title
Debian DLA	DLA-4672-1	chromium security update
Debian DSA	DSA-6378-1	chromium security update

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00313.

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html
https://issues.chromium.org/issues/501877896

History

Mon, 03 Aug 2026 07:00:00 +0000

Type	Values Removed	Values Added
Title	Chromecast Policy Enforcement Flaw Allows Remote Privilege Escalation in Chrome

Wed, 29 Jul 2026 23:00:00 +0000

Type	Values Removed	Values Added
Title		Chromecast Policy Enforcement Flaw Allows Remote Privilege Escalation in Chrome

Fri, 24 Jul 2026 18:30:00 +0000

Type	Values Removed	Values Added
Title	Chromium Chromecast Privilege Escalation via Crafted HTML

Wed, 15 Jul 2026 11:30:00 +0000

Type	Values Removed	Values Added
Title		Chromium Chromecast Privilege Escalation via Crafted HTML

Tue, 14 Jul 2026 01:30:00 +0000

Type	Values Removed	Values Added
Title	Chromium Chromecast Access Control Bypass Allowing Privilege Escalation

Sat, 11 Jul 2026 17:15:00 +0000

Type	Values Removed	Values Added
Title		Chromium Chromecast Access Control Bypass Allowing Privilege Escalation

Fri, 10 Jul 2026 18:30:00 +0000

Type	Values Removed	Values Added
Title	Insufficient Policy Enforcement in Chrome's Chromecast Allows Privilege Escalation

Wed, 08 Jul 2026 20:15:00 +0000

Type	Values Removed	Values Added
Title		Insufficient Policy Enforcement in Chrome's Chromecast Allows Privilege Escalation

Tue, 07 Jul 2026 22:00:00 +0000

Type	Values Removed	Values Added
Title	Chromium Chromecast Component Privilege Escalation via Insufficient Policy Enforcement

Mon, 06 Jul 2026 21:00:00 +0000

Type	Values Removed	Values Added
Title		Chromium Chromecast Component Privilege Escalation via Insufficient Policy Enforcement

Mon, 06 Jul 2026 07:45:00 +0000

Type	Values Removed	Values Added
Title	Remote Privilege Escalation via Chromecast Policy Bypass

Sun, 05 Jul 2026 11:45:00 +0000

Type	Values Removed	Values Added
Title		Remote Privilege Escalation via Chromecast Policy Bypass

Sat, 04 Jul 2026 23:30:00 +0000

Type	Values Removed	Values Added
Title	Insufficient Policy Enforcement in Chrome Chromecast Enables Remote Privilege Escalation

Sat, 04 Jul 2026 04:30:00 +0000

Type	Values Removed	Values Added
Title		Insufficient Policy Enforcement in Chrome Chromecast Enables Remote Privilege Escalation

Fri, 03 Jul 2026 12:45:00 +0000

Type	Values Removed	Values Added
Title	Insufficient Policy Enforcement in Chromecast Enables Remote Privilege Escalation

Thu, 02 Jul 2026 23:00:00 +0000

Type	Values Removed	Values Added
Title		Insufficient Policy Enforcement in Chromecast Enables Remote Privilege Escalation

Thu, 02 Jul 2026 12:00:00 +0000

Type	Values Removed	Values Added
Title	Chromecast Policy Enforcement Allows Remote Privilege Escalation via Malicious HTML

Thu, 02 Jul 2026 05:00:00 +0000

Type	Values Removed	Values Added
Title		Chromecast Policy Enforcement Allows Remote Privilege Escalation via Malicious HTML

Wed, 01 Jul 2026 22:30:00 +0000

Type	Values Removed	Values Added
Title	Chromium Chromecast Policy Enforcement Flaw Enables Remote Privilege Escalation
Weaknesses	CWE-640

Wed, 01 Jul 2026 14:45:00 +0000

Type	Values Removed	Values Added
Title		Chromium Chromecast Policy Enforcement Flaw Enables Remote Privilege Escalation
Weaknesses		CWE-640

Wed, 01 Jul 2026 14:30:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-284
Metrics		cvssV3_1 `{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Wed, 01 Jul 2026 10:45:00 +0000

Type	Values Removed	Values Added
Title	Chromecast Policy Enforcement Flaw Enables Privilege Escalation via Malicious HTML in Chrome
Weaknesses	CWE-269 CWE-284

Wed, 01 Jul 2026 09:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Google Google chrome
Vendors & Products		Google Google chrome

Wed, 01 Jul 2026 06:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-269 CWE-284

Wed, 01 Jul 2026 03:15:00 +0000

Type	Values Removed	Values Added
Title		Chromecast Policy Enforcement Flaw Enables Privilege Escalation via Malicious HTML in Chrome

Tue, 30 Jun 2026 23:15:00 +0000

Type	Values Removed	Values Added
Description		Insufficient policy enforcement in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium)
References		https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html https://issues.chromium.org/issues/501877896

Subscriptions

Google Chrome

MITRE

Status: PUBLISHED

Assigner: Chrome

Published: 2026-06-30T22:38:13.307Z

Updated: 2026-07-02T03:57:09.173Z

Reserved: 2026-06-29T23:03:44.965Z

Link: CVE-2026-13897

Vulnrichment

Updated: 2026-07-01T14:06:19.475Z

NVD

No data.

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-08-03T06:45:04Z

Weaknesses

CWE-284
Improper Access Control

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

Exploitation none

Automatable no

Technical Impact total

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object