Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-13827: Google Chrome Mac Privilege Escalation via Malicious File

CVE-2026-13827 · published 4 months ago

Summary

A vulnerability in older versions of Google Chrome on Mac allows an attacker with access to the local machine to potentially gain elevated privileges. This could be exploited by creating a malicious file that takes advantage of the vulnerability. Users should update to the latest version of Google Chrome to fix this issue.

What to do

Update google chrome to version 150.0.7871.46 or later.

Affected software

Ecosystem	Vendor	Product	Affected versions
Debian:11	debian	chromium	All versions
Debian:12	debian	chromium	All versions
Debian:13	debian	chromium	All versions
Debian:14	debian	chromium	All versions
–	google	chrome	< 150.0.7871.46 `cpe:2.3:a:google:chrome::::::::`

Original advisory text

Use after free in Updater in Google Chrome on Mac prior to 150.0.7871.47 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: High)

References

https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_... Vendor Advisory
https://issues.chromium.org/issues/513371963 Permissions Required
https://security-tracker.debian.org/tracker/CVE-2026-13827 Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

7.8 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-416Use After Free

Timeline

Published30 Jun 2026

Updated26 Oct 2026

First seen2 Jul 2026

Sources

DEBIAN-CVE-2026-13827 · OSV

CVE-2026-13827 · NVD

Track software like this

Free during beta