8.3
CVE-2026-13281
- EPSS 0.18%
- Veröffentlicht 25.06.2026 21:51:33
- Zuletzt bearbeitet 27.06.2026 05:16:41
- Quelle chrome-cve-admin@google.com
- CVE-Watchlists
- Unerledigt
LoginInteger overflow in Mojo in Google Chrome prior to 149.0.7827.201 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.18% | 0.075 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 8.3 | 1.6 | 6 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
|
CWE-472 External Control of Assumed-Immutable Web Parameter
The web application does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable, such as hidden form fields.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_01245939337.html
https://issues.chromium.org/issues/513138301