CVE Catalog
CVE-2026-13030
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk0.19%
8th percentile — higher than 8% of all known CVEs
Summary
Uninitialized use in GPU in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
Risk Assessment
The risk involves potential leakage of sensitive information from browser memory, which could lead to disclosure of user data or sessions.
Recommendation
Immediately update Google Chrome on Android to version 149.0.7827.197 or later.
Original NVD description (English source)
Uninitialized Use in GPU in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)