[CVE-2026-13849] Insufficient validation of untrusted input in Chromoting in Google Chrome on Windows prior to 150.0.…

Descripción técnica

Insufficient validation of untrusted input in Chromoting in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)

Puntuación CVSS

Score: 8.6/10 — Severidad: HIGH — Estado NIST: Modified

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Productos afectados

Chrome, Windows — Google, Microsoft

Debilidades (CWE)

CWE-20

Fuente oficial

Publicado en NIST NVD.