CVE-2026-13940

MEDIUM

Google Chrome - Use of Uninitialized Variable

Title source: rule
STIX 2.1

Description

Uninitialized Use in Cast in Google Chrome prior to 150.0.7871.47 allowed an attacker on the local network segment to obtain potentially sensitive information from process memory via malicious network traffic. (Chromium security severity: Medium)

Scores

CVSS v3 6.5
EPSS 0.0015
EPSS Percentile 4.4%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-457
Status published
Products (2)
google/chrome < 150.0.7871.47
Google/Chrome 150.0.7871.47
Published Jun 30, 2026
Tracked Since Jul 01, 2026