Threats Tagged 'cve-2026-13812'

This security update for Chromium addresses multiple critical vulnerabilities including out-of-bounds writes, use-after-free errors, type confusion, insufficient validation of untrusted input, integer overflows, uninitialized use, stack buffer overflows, heap buffer overflows, and insufficient policy enforcement across various components such as Codecs, WebMCP, Blink, Input, WebAudio, ANGLE, Chromecast, Extensions, Skia, V8, GPU, CameraCapture, Network, Cast, Ozone, Aura, HTML-in-Canvas, Linux Toolkit Theming, Media, Core, UI, Views, Autofill, WebAppInstalls, Actor, Payments, WebRTC, DOM, Passwords, Forms, WebGL, Navigation, IndexedDB, InterestGroups, GetUserMedia, Browser, Bluetooth, Fullscreen, Dawn, WebUSB, Chromoting, and others. The update spans multiple Chromium versions from 150.0.7871.46 through 150.0.7871.186. These fixes collectively improve stability and security by mitigating critical memory safety and input validation issues.

Use after free in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium security severity: Critical)

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: High)