CVE-2026-13023
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk8th percentile — higher than 8% of all known CVEs
Summary
Uninitialized Use in GPU in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.
Risk Assessment
The risk involves leakage of sensitive data from browser memory, potentially leading to exposure of passwords, session tokens, or other confidential information stored in the renderer process.
Recommendation
Immediately update Google Chrome to version 149.0.7827.197 or later. Ensure updates are applied on all user systems.
Original NVD description (English source)
Uninitialized Use in GPU in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)