CVE-2026-13940

Summary

Uninitialized Use in Cast in Google Chrome prior to 150.0.7871.47 allowed an attacker on the local network segment to obtain potentially sensitive information from process memory via malicious network traffic. (Chromium security severity: Medium)

Affected Software

VendorProductVersion RangeStatus
GoogleChrome150.0.7871.47 < 150.0.7871.47affected

Weaknesses

  • CWE-457: Uninitialized Use

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References