CVE Catalog
CVE-2026-13022
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.14%
4th percentile — higher than 4% of all known CVEs
Summary
An inappropriate implementation in Autofill in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.
Risk Assessment
An attacker can steal sensitive user data, such as autofill information, from other origins, leading to privacy breaches and potential identity theft.
Recommendation
Immediately update Google Chrome to version 149.0.7827.197 or later to remediate this vulnerability.
Original NVD description (English source)
Inappropriate implementation in Autofill in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)