CVE-2026-132826.8MediumCWE-416

CVE-2026-13282: Google Chrome vulnerability

Google · Chrome

Vendor fix available · Affected: Google Chrome · Exploitation: not established

ExploitationNot established

Not in CISA KEV as of catalogue 2026.11.13 (13 Nov)

In CISA KEV: not seen
Exploited (reported): not seen
Scanning observed: not seen
Proof of concept public: not seen
Not establishedNothing in the sources we check

0.1%probability of exploitation in the next 30 days

4th percentile

050100

Higher than 4% of scored CVEs

6.8MediumCVSS

LowMediumHighCrit.

DescriptionNVD

Use after free in Payments in Google Chrome on Android prior to 149.0.7827.201 allowed a local attacker to potentially exploit heap corruption via physical access to the device. (Chromium security severity: High)

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Use After Free · Memory Corruption
Vendor: Google
Published: June 2026
Band: Unlikely (under 1%), June 2026

Coverage1 article · 1 outlet

First in our coverage: SecurityOnline, 26 Jun.

26 Jun 03:30
Chrome patches three high severity flaws, urges swift update
SecurityOnline · first in our coverage · mentions it in passing

New articles also arrive in the RSS feed.