PT-2026-54062 · Google · Google Chrome

Published 2026-06-30 · Updated 2026-07-01 · CVE-2026-13785

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47

Description A use-after-free issue exists in the Bluetooth component of Google Chrome on macOS. A remote attacker can exploit this by convincing a user to visit a crafted HTML page and perform specific UI gestures, which may lead to a sandbox escape. A sandbox escape occurs when code breaks out of the isolated renderer process to gain broader access to the host system.

Recommendations Update Google Chrome to version 150.0.7871.47.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-13785

Affected Products

Google Chrome

References · 4

• https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-13785 · Security Note
• https://twitter.com/UpwindMDR/status/2072223416409604245 · Twitter Post
• https://issues.chromium.org/issues/517021684 · Note