CVE Catalog

CVE-2026-13803

HighCVSS 8.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.28%

20th percentile — higher than 20% of all known CVEs

Summary

A Type Confusion vulnerability in Chrome Tabs in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue is rated as High severity in Chromium.

Risk Assessment

An attacker can exploit this vulnerability to escape the browser sandbox, gaining access to the underlying operating system and potentially escalating privileges within the organization.

Recommendation

Immediately update Google Chrome to version 150.0.7871.47 or later. Ensure the update is deployed across all workstations in the organization.

Original NVD description (English source)

Type Confusion in Chrome Tabs in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS