Back Linuxsecurity

Fedora 43 Chromium Important Use After Free Issues CVE-2026

Linuxsecurity •LinuxSecurity Advisories • July 1, 2026

Update to 149.0.7827.200 CVE-2026-13281: Integer overflow in Mojo CVE-2026-13282: Use after free in Payments CVE-2026-13283: Use after free in AdFilter

* Fri Jun 26 2026 Than Ngo - 149.0.7827.200-1 - Update to 149.0.7827.200 CVE-2026-13281: Integer overflow in Mojo CVE-2026-13282: Use after free in Payments CVE-2026-13283: Use after free in AdFilter

Fedora Update Notification FEDORA-2026-7f29bc3622 2026-07-01 01:21:48.846202+00:00 Name : chromium Product : Fedora 43 Version : 149.0.7827.200 Release : 1.fc43 URL : Summary : A WebKit (Blink) powered web browser that Google doesn't want you to use Description : Chromium is an open-source web browser, powered by WebKit (Blink).

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-7f29bc3622' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Use After Free and Integer Overflow Vulnerabilities in Fedora Chromium On June 25, 2026, three critical vulnerabilities were published affecting Chromium version 149.0.7827.200, specifically CVE-2026-13281 (Integer overflow in Mojo), CVE-2026-13282 (Use after free in Payments), and CVE-2026-13283 (Use after free in AdFilter). These vulnerabilities could potentially allow attackers to exploit memory management issues, leading to arbitrary code execution. Fedora 43 and Fedora 44 users are advised to update their Chromium installations to mitigate these risks. The updates were released on June 26, 2026, and are available via the dnf package manager. The vulnerabilities were confirmed by Than Ngo in the update notifications. As of July 1, 2026, users are urged to ensure their systems are updated to the latest version to avoid exploitation. 2 sources 71

Extracted Entities

Fedora 43 Chromium Important Use After Free Issues CVE-2026

The full story

Extracted Entities

Companies (1)

CVEs (3)

CWE Weaknesses (2)

Platforms (3)