PT-2026-38206 · Google · Google Chrome

Published 2026-03-29 · Updated 2026-05-14 · CVE-2026-8013

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.96

Description Insufficient validation of untrusted input in FedCM (Federated Credential Management), an API that allows users to sign into websites using credentials from a third-party identity provider, enables a remote attacker to leak cross-origin data through a crafted HTML page.

Recommendations Update to version 148.0.7778.96 or later.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2026-07934

CVE-2026-8013

ECHO-8B63-0754-18EF

OPENSUSE-SU-2026:10778-1

Affected Products

Google Chrome

References · 142

• https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-8013 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-07934 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10778-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-8013 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8013 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-8013 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8013 · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-7940 · Note
• https://suse.com/security/cve/CVE-2026-7976 · Note
• https://suse.com/security/cve/CVE-2026-8011 · Note
• https://suse.com/security/cve/CVE-2026-7915 · Note
• https://suse.com/security/cve/CVE-2026-8001 · Note
• https://suse.com/security/cve/CVE-2026-8021 · Note
• https://suse.com/security/cve/CVE-2026-7905 · Note