[UPDATE] [high] Google Chrome: Multiple vulnerabilities allow unspecified attack
An attacker can exploit multiple vulnerabilities in Google Chrome to conduct an unspecified attack, potentially including executing arbitrary code, causing a denial-of-service attack, bypassing security measures, and altering and disclosing data.
CSIRTS triage
- What
- Multiple vulnerabilities in Google Chrome allow an attacker to conduct unspecified attacks, potentially including executing arbitrary code, causing denial-of-service attacks, bypassing security measures, and altering and disclosing data.
- Who is affected
- Users of Google Chrome are affected by these vulnerabilities.
- Urgency
- Remediation is high priority due to the high severity and potential for exploitation by remote attackers.
- Action
- Update Google Chrome to the latest version to mitigate these vulnerabilities.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Chrome
Get an email when a new Chrome advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2143
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-137740.30% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 22% of all scored CVEs.
- Low exploitation riskCVE-2026-137750.31% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 23% of all scored CVEs.
- Low exploitation riskCVE-2026-137760.34% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 26% of all scored CVEs.
- Low exploitation riskCVE-2026-137770.29% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 21% of all scored CVEs.
- Low exploitation riskCVE-2026-137780.14% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 4% of all scored CVEs.
- Low exploitation riskCVE-2026-137790.37% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 29% of all scored CVEs.
- Low exploitation riskCVE-2026-137800.31% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 23% of all scored CVEs.
- Low exploitation riskCVE-2026-137810.31% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 23% of all scored CVEs.
- Low exploitation riskCVE-2026-137820.29% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 21% of all scored CVEs.
- Low exploitation riskCVE-2026-137830.31% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 23% of all scored CVEs.
Referenced CVEs
+12 more CVEs referenced in this advisory.
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- unknownMultiple vulnerabilities in Microsoft Edge (July 7, 2026)cert-fr-avis
- unknownMicrosoft Edge Multiple Vulnerabilitieshkcert
- unknownDSA-6378-1 chromium - security updatedebian
- unknownCVE-2026-13780: Chromium: CVE-2026-13780 Insufficient validation of untrusted input in ANGLEmsrc
- unknownCVE-2026-13831: Chromium: CVE-2026-13831 Use after free in GPUmsrc
- unknownCVE-2026-13776: Chromium: CVE-2026-13776 Type Confusion in Dawnmsrc
- unknownCVE-2026-13815: Chromium: CVE-2026-13815 Use after free in Blinkmsrc
- unknownCVE-2026-13779: Chromium: CVE-2026-13779 Use after free in Chromotingmsrc
- unknownCVE-2026-13786: Chromium: CVE-2026-13786 Use after free in Ozonemsrc
- unknownCVE-2026-13797: Chromium: CVE-2026-13797 Insufficient validation of untrusted input in Chromecastmsrc
- unknownCVE-2026-13793: Chromium: CVE-2026-13793 Insufficient policy enforcement in SVGmsrc
- unknownCVE-2026-13775: Chromium: CVE-2026-13775 Use after free in GPUmsrc
Recent advisories for Google Chrome
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- unknownGoogle Chrome security advisory (AV26-679)cccs · 2026-07-09
- high[NEW] [high] Google Chrome: Multiple vulnerabilitiescert-bund · 2026-07-09
- unknownGoogle Chrome Multiple Vulnerabilitieshkcert · 2026-07-09
- unknownMultiple vulnerabilities in Google Chrome (July 09, 2026)cert-fr-avis · 2026-07-09
- highCVE-2026-15133: Use after free in InterestGroups in Google Chrome prior to 150.0.7871.115 allowed a remote att…nvd · 2026-07-08
- highCVE-2026-15132: Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to …nvd · 2026-07-08
More from CERT-Bund (BSI) Security Advisories
- medium[NEW] [medium] DENX U-Boot: Multiple vulnerabilities allow execution of arbitrary code and DoS2026-07-10
- medium[NEW] [medium] Samsung Android: Multiple vulnerabilities2026-07-10
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow denial of service2026-07-10
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow unspecified attack2026-07-10
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow denial of service2026-07-10