Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.6
CVE-2026-13797: Google Chrome: Malicious Webpage Escapes Security Sandbox
CVE-2026-13797 · published 4 months ago
Summary
A security issue in older versions of Google Chrome on Chromecast devices allows a hacker who has already taken control of the device's browser to potentially run malicious code outside of the browser's security restrictions. This could lead to further unauthorized access to the device. Users should update their Google Chrome version to the latest one.
What to do
- Update debian chromium to version 150.0.7871.46-1~deb13u1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:11 | debian | chromium | All versions |
| Debian:12 | debian | chromium | All versions |
| Debian:13 | debian | chromium |
< 150.0.7871.46-1~deb13u1 Fix: upgrade to 150.0.7871.46-1~deb13u1
|
| Debian:14 | debian | chromium | All versions |
Original advisory text
Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox ...
Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Type
CWE-20Improper Input Validation
Timeline
Published30 Jun 2026
Updated31 Oct 2026
First seen1 Jul 2026
Track software like this
Free during beta