CVE-2026-13037 – Google Chrome

This Google Chrome updates address 370 security vulnerabilities affecting Chrome on Windows, Linux, and Android. The fixes include several use-after-free vulnerabilities, heap buffer overflow, uninitialized memory use, and a same-origin policy bypass. Successful exploitation of the most severe issues could allow remote code execution, sandbox escape, privilege escalation, heap corruption, or disclosure of sensitive information through crafted web content.

CVE-2026-15773 has a CVSS score of 9.6, Critical severity. CVE-2026-13032 has a CVSS score of 9.6, Critical severity. CVE-2026-15767 has a CVSS score of 8.8, High severity. CVE-2026-15112 has a CVSS score of 8.8, High severity. CVE-2026-15129 has a CVSS score of 8.8, High severity. CVE-2026-13037 has a CVSS score of 7.8, High severity. CVE-2026-15764 has a CVSS score of 7.5, High severity. CVE-2026-15765 has a CVSS score of 7.5, High severity. CVE-2026-15766 has a CVSS score of 6.5, Medium severity. CVE-2026-15775 has a CVSS score of 6.5, Medium severity. CVE-2026-13030 has a CVSS score of 5.3, Medium severity.

Several of the high and critical vulnerabilities enable remote code execution or sandbox escape, while others could expose sensitive information or bypass browser security boundaries. No verified real-world exploitation or public proof-of-concept activity has been confirmed for these vulnerabilities.