[ CVE-2026-13018 · Published 28 Sep 2026 ]

Vulnerability in Google Chrome

CVSS 4.3 EPSS <1%No fix listed yet

[ Description ]Official description

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially perform out of bounds memory access via a crafted video file. (Chromium security severity: Low)

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ References ]References

chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.htmlRelease NotesVendor Advisory
issues.chromium.org/issues/487950074Permissions Required