Use After Free Vulnerability in Payments on Google Chrome for Android

CVE-2026-13282

What is CVE-2026-13282?

A use after free vulnerability located in the Payments component of Google Chrome for Android prior to version 149.0.7827.201 can be exploited by local attackers. This flaw enables potential heap corruption, particularly when an attacker has physical access to the device. The exploitation of this vulnerability raises serious security concerns, as it could allow malicious individuals to manipulate or compromise sensitive data managed by the application.

References