Is CVE-2026-13018 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-13018?

CVE-2026-13018 has a CVSS v3 severity of MEDIUM (4.3).

Back

CVE-2026-13018

Description

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially perform out of bounds memory access via a crafted video file. (Chromium security severity: Low)