Loading vulnerability…
Use-after-free sandbox escape in Google Chrome Browser
CVE-2026-13782 is a use-after-free vulnerability in the Browser component of Google Chrome before version 150.0.7871.47. A remote attacker who has already compromised the renderer process could potentially exploit the vulnerability through a crafted HTML page to escape the renderer sandbox. The precise vulnerable function and memory-lifetime failure are not specified.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation could bypass the renderer sandbox, allowing an attacker with an existing renderer-process compromise to extend that compromise beyond its containment boundary. Specific confidentiality, integrity, or availability effects attributable to this vulnerability alone are not established.
If you can’t patch tonight, do this now.
No vulnerability-specific workaround is established. Pending patch deployment, least-privilege operation, exploit protection, application isolation, and restrictions on untrusted web content and browser extensions may reduce exposure or downstream impact but are not substitutes for updating.
Patch, then assume compromise.
Upgrade Google Chrome to version 150.0.7871.47 or a later patched release. Platform-specific update guidance also identifies 150.0.7871.46 for Linux and 150.0.7871.46/.47 for Windows and macOS; use the latest vendor-supported patched release rather than relying on the inconsistent minimum-version references. For Debian stable (trixie), install chromium 150.0.7871.46-1~deb13u1 or a later Debian-patched package. For affected Prisma Browser deployments, upgrade to 150.41.2.115 or later.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
12 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.