Vulnerability intelligence

CVE-2026-13282

Use after free in Payments in Google Chrome on Android prior to 149.0.7827.201 allowed a local attacker to potentially exploit heap corruption via physical access to the device. (Chromium security severity: High)

CVSS Score

6.8

Medium

EPSS — Exploit Probability

0.2%

Riskier than 5% of all CVEs · checked 2026-09-21

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

Patch available

Vendor fix published

NVD entry Vendor patch PoC / advisory

1 article across 1 outlet · first covered Jun 26, 2026 · latest Jun 26, 2026

Coverage timeline

Chrome patches three high severity flaws, urges swift update
securityonline.info · Jun 26, 2026

Related CVEs — Google

CVE-2026-85046KEV CVE-2026-87491KEV CVE-2026-49881 CVE-2026-58704KEV CVE-2026-93374 CVE-2026-93372 CVE-2026-93377 CVE-2026-93381