CVE-2026-13281

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.201

Description An integer overflow exists in Mojo, a Chromium IPC (Inter-Process Communication) framework. This issue allows a remote attacker who has already compromised the renderer process to potentially achieve a sandbox escape by using a malicious file. A sandbox escape is a technique used to break out of the restricted environment where the browser process runs to gain unauthorized access to the underlying system.

Recommendations Update Google Chrome to version 149.0.7827.201 or later.