CVE-2026-13899

HighCVSS 8.8

Published: 30/06/2026(UTC)Updated: 02/07/2026(UTC)Translated: 03/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.37%

29th percentile — higher than 29% of all known CVEs

Summary

A Use-After-Free vulnerability in the HTML component of Google Chrome prior to version 150.0.7871.47 was discovered. A remote attacker could exploit a crafted HTML page to execute arbitrary code within the sandbox environment.

Risk Assessment

The risk involves remote code execution by an attacker, potentially compromising data confidentiality and integrity within the browser's sandbox.

Recommendation

It is recommended to immediately update Google Chrome to version 150.0.7871.47 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

Use after free in HTML in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)