CVE-2026-13029 is a use-after-free vulnerability in Google Chrome's Web Authentication feature affecting versions before 149.0.7827.197. An attacker could exploit this by tricking a user into installing a malicious Chrome extension, which may lead to heap corruption. The vulnerability was publicly disclosed and is considered high severity by the Chromium security team. No official remediation level or patch details are explicitly stated in the provided data, but a vendor advisory URL is available for further information.

Successful exploitation could result in heap corruption, potentially allowing an attacker to execute arbitrary code or cause a denial of service within the context of the affected Chrome browser. The attack requires user interaction in the form of installing a malicious extension.

Check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0482630350.html for the latest remediation guidance. Since the affected versions are prior to 149.0.7827.197, updating Chrome to version 149.0.7827.197 or later is recommended if a fix is confirmed there. Patch status is not explicitly confirmed in the input data; therefore, verify the vendor advisory for current patch availability and remediation instructions.