Threat intelligence dashboard
CVE-2026-13018medium

Vulnerability record

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially perform out of bounds memory access via a crafted video file. (Chromium security severity: Low)

Risk score

4.3

CVSS 3.1

Vendor
Google
Product
Chrome
CWE
CWE-20
Published
Sep 28, 2026
Updated
Sep 28, 2026
CISA KEV
Not flagged

Affected products and versions

Chrome

Google

Version / rangeStatusType
147.0.7727.55 to before 147.0.7727.55affectedcustom

Technical metrics

4.3

CVSS 3.1

Severity
medium
Source
CISA-ADP
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N