CVE-2026-13820
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk18th percentile — higher than 18% of all known CVEs
Summary
An out-of-bounds read vulnerability in the Skia library in Google Chrome on Mac prior to version 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.
Risk Assessment
The risk involves potential theft of sensitive cross-origin data, which could compromise user confidentiality, including login credentials and session information, especially in enterprise environments.
Recommendation
Immediately update Google Chrome on Mac systems to version 150.0.7871.47 or later, which includes a fix for this vulnerability.
Original NVD description (English source)
Out of bounds read in Skia in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)