cve 2026-13022

The cve 2026-13022 tag covers a high-severity Chromium Autofill vulnerability affecting Google Chrome versions before 149.0.7827.197 on Windows. The flaw can allow a remote attacker who has already compromised the browser’s renderer process to leak cross-origin data through a specially crafted HTML page. It is not described as a standalone attack triggered simply by visiting a website, but it may contribute to a broader attack chain involving Autofill and site isolation. Coverage focuses on the security implications for Chrome users and administrators, and the recommended response is to update Chrome to version 149.0.7827.197 or later.