Threats Tagged 'cve-2026-13808'

This security update for Chromium addresses multiple critical vulnerabilities including out-of-bounds writes, use-after-free errors, type confusion, insufficient validation of untrusted input, integer overflows, uninitialized use, stack buffer overflows, heap buffer overflows, and insufficient policy enforcement across various components such as Codecs, WebMCP, Blink, Input, WebAudio, ANGLE, Chromecast, Extensions, Skia, V8, GPU, CameraCapture, Network, Cast, Ozone, Aura, HTML-in-Canvas, Linux Toolkit Theming, Media, Core, UI, Views, Autofill, WebAppInstalls, Actor, Payments, WebRTC, DOM, Passwords, Forms, WebGL, Navigation, IndexedDB, InterestGroups, GetUserMedia, Browser, Bluetooth, Fullscreen, Dawn, WebUSB, Chromoting, and others. The update spans multiple Chromium versions from 150.0.7871.46 through 150.0.7871.186. These fixes collectively improve stability and security by mitigating critical memory safety and input validation issues.

Use after free in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium security severity: Critical)

Insufficient data validation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a local attacker to obtain potentially sensitive information from process memory via physical access to the device. (Chromium security severity: High)