CVE Catalog
CVE-2026-13965
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk0.34%
25th percentile — higher than 25% of all known CVEs
Summary
A use-after-free vulnerability was found in the Oilpan component of Google Chrome prior to version 150.0.7871.47. A remote attacker can exploit a crafted HTML page to execute arbitrary code inside a sandbox.
Risk Assessment
The risk involves potential remote code execution within a sandbox, which could compromise user data confidentiality and integrity.
Recommendation
It is recommended to immediately update Google Chrome to version 150.0.7871.47 or later.
Original NVD description (English source)
Use after free in Oilpan in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)