CVE-2026-13018Published
Insufficient validation of untrusted input in Codecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially perform out of bounds memory access via a crafted video file. (Chromium security severity: Low)
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-13018 · Microsoft / collected KEV context
cve-program · CVE-2026-13018
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.