CVE-2026-13943

MediumCVSS 6.5

Published: 30/06/2026(UTC)Updated: 02/07/2026(UTC)Translated: 03/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

21th percentile — higher than 21% of all known CVEs

Summary

An uninitialized use vulnerability in CSS in Google Chrome on Android prior to 150.0.7871.47 allows a remote attacker to read potentially sensitive data from process memory via a crafted HTML page.

Risk Assessment

The risk involves potential leakage of confidential information from browser memory, which could lead to exposure of user data such as passwords or session tokens.

Recommendation

Immediately update Google Chrome on Android to version 150.0.7871.47 or later.

Original NVD description (English source)

Uninitialized Use in CSS in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)