CVE Catalog
CVE-2026-13799
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk0.30%
22th percentile — higher than 22% of all known CVEs
Summary
A use-after-free vulnerability in QUIC in Google Chrome prior to 150.0.7871.47 allows a remote attacker to potentially exploit heap corruption via malicious network traffic.
Risk Assessment
An attacker could remotely execute arbitrary code in the browser context, potentially leading to session takeover or sensitive data leakage.
Recommendation
Immediately update Google Chrome to version 150.0.7871.47 or later. Chromium users should apply the corresponding patch when available.
Original NVD description (English source)
Use after free in QUIC in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via malicious network traffic. (Chromium security severity: High)