CVE-2026-13804
HighCVSS 8.3Exploitation Probability (EPSS)
Low risk17th percentile — higher than 17% of all known CVEs
Summary
A Use-After-Free vulnerability in the Chromecast component of Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue is rated as High severity.
Risk Assessment
An attacker can exploit this flaw to break out of the browser sandbox, leading to full system compromise and data theft.
Recommendation
Immediately update Google Chrome to version 150.0.7871.47 or later. Centrally managed users should deploy the update via group policies.
Original NVD description (English source)
Use after free in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)