CVE-2026-13825

HighCVSS 8.8

Published: 30/06/2026(UTC)Updated: 02/07/2026(UTC)Translated: 03/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

22th percentile — higher than 22% of all known CVEs

Summary

An uninitialized use vulnerability in the Dawn component in Google Chrome prior to 150.0.7871.47 allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Risk Assessment

An attacker could remotely cause a browser crash or potentially execute arbitrary code, posing a high risk to user data confidentiality and integrity.

Recommendation

Immediately update Google Chrome to version 150.0.7871.47 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

Uninitialized Use in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)