CVE-2026-13828
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk17th percentile — higher than 17% of all known CVEs
Summary
An inappropriate implementation in the Enterprise component in Google Chrome prior to 150.0.7871.47 allows a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
Risk Assessment
The organization risks exposure of confidential data, such as passwords, encryption keys, or authentication credentials, stored in the browser's memory.
Recommendation
Immediately update Google Chrome to version 150.0.7871.47 or later. Conduct an audit of systems to identify outdated browser versions.
Original NVD description (English source)
Inappropriate implementation in Enterprise in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)