Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

Google Chrome: Compromised browser can escape security sandbox

CVE-2026-13782 · published 4 months ago
Summary

A critical security risk was found in older versions of Google Chrome. If an attacker had already taken control of your browser, they could have used a specially crafted webpage to break out of the security features that keep them contained. Update your browser to the latest version to fix this issue.

What to do
  • Update debian chromium to version 150.0.7871.46-1~deb13u1.
  • Update google chrome to version 150.0.7871.46 or later.
Affected software
Ecosystem VendorProductAffected versions
Debian:11 debian chromium All versions
Debian:12 debian chromium All versions
Debian:13 debian chromium < 150.0.7871.46-1~deb13u1
Fix: upgrade to 150.0.7871.46-1~deb13u1
Debian:14 debian chromium All versions
– google chrome < 150.0.7871.46
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Original advisory text
Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page....
Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
10.0 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-416Use After Free
Timeline
Published30 Jun 2026
Updated13 Nov 2026
First seen1 Jul 2026
Sources
CVE-2026-13782 · NVD
DEBIAN-CVE-2026-13782 · OSV
Track software like this
Free during beta