60
CVE-2026-13038
- CVSS 3.1
- 8.8 high
- EPSS
- <1%p32
- Published
- ·
- Modified
Description · NVD
Use after free in Autofill in Google Chrome on Windows prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)