Use After Free Vulnerability in Google Chrome Web Authentication

CVE-2026-13029

What is CVE-2026-13029?

A use after free vulnerability exists in the Web Authentication component of Google Chrome, allowing an attacker to manipulate memory allocation and potentially exploit heap corruption. This occurs if a user installs a malicious Chrome extension, providing a pathway for the attacker to exploit the flaw. As the vulnerability affects versions prior to 149.0.7827.197, it is crucial for users to ensure they are running the latest version of the browser to mitigate possible threats.

References