CVE-2026-13869
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk20th percentile — higher than 20% of all known CVEs
Summary
A Use-After-Free vulnerability in the Device component of Google Chrome on Windows prior to version 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue is rated as Medium severity in Chromium.
Risk Assessment
The risk involves potential escalation from a compromised renderer process to a full sandbox escape, which could lead to system compromise and unauthorized access to sensitive organizational data.
Recommendation
Immediately update Google Chrome to version 150.0.7871.47 or later on all Windows workstations and enable automatic update mechanisms.
Original NVD description (English source)
Use after free in Device in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)