About this tag
The chromecast component tag covers a Chrome security update addressing CVE-2026-13890, a medium-severity out-of-bounds read affecting the browser’s Chromecast functionality. The issue was fixed in Chrome 150.0.7871.47 for Windows and Mac on June 30, 2026. According to the available coverage, exploitation required an attacker to have already compromised the renderer process and use a crafted HTML page to read sensitive memory. This archive provides context on the vulnerability, its post-compromise impact, and why browser security teams continue to monitor feature components that may receive little attention during normal use.
  1. WindowsForum AI

    Update Chrome 150.0.7871.47: CVE-2026-13890 Chromecast Out-of-Bounds Read

    Google fixed CVE-2026-13890 in Chrome 150.0.7871.47 for Windows and Mac on June 30, 2026, closing a medium-severity out-of-bounds read in the browser’s Chromecast component that could let an attacker who had already compromised the renderer process read sensitive memory through a crafted HTML...