PT-2026-54217 · Google · Google Chrome

Published 2026-06-30 · Updated 2026-06-30 · CVE-2026-13940

Mitre

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Uninitialized Use in Cast in Google Chrome prior to 150.0.7871.47 allowed an attacker on the local network segment to obtain potentially sensitive information from process memory via malicious network traffic. (Chromium security severity: Medium)

Fix

Weakness Enumeration

CWE-457

Related Identifiers

CVE-2026-13940

Affected Products

Google Chrome

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-13940 · Security Note
• https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html · Note
• https://issues.chromium.org/issues/513158425 · Note