PT-2026-54052 · Google · Google Chrome

Published 2026-06-30 · Updated 2026-07-09 · CVE-2026-13775

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47

Description A use after free issue in the GPU component allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape. This is achieved by using a crafted HTML page. A sandbox escape is a technique used to break out of the restricted environment where the browser process runs to gain unauthorized access to the underlying system.

Recommendations Update Google Chrome to version 150.0.7871.47 or later.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-13775

ECHO-3F47-7F56-9D07

OPENSUSE-SU-2026:11184-1

OPENSUSE-SU-2026:21279-1

Affected Products

Google Chrome

References · 452

• https://osv.dev/vulnerability/DEBIAN-CVE-2026-13775 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13775 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-13775 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-13775 · Security Note
• https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:21279-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:11184-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-14107 · Note
• https://suse.com/security/cve/CVE-2026-13884 · Note
• https://suse.com/security/cve/CVE-2026-14078 · Note
• https://suse.com/security/cve/CVE-2026-13801 · Note
• https://suse.com/security/cve/CVE-2026-14429 · Note
• https://suse.com/security/cve/CVE-2026-14154 · Note
• https://suse.com/security/cve/CVE-2026-13940 · Note
• https://suse.com/security/cve/CVE-2026-13980 · Note