PT-2026-54080 · Google · Google Chrome

Jason Villaluna · Published 2026-06-30 · Updated 2026-07-09 · CVE-2026-13803

Positive Technologies (AI Summary)

CVSS v3.1

8.3

High

Base vector

AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47

Description A type confusion issue exists in Chrome Tabs. This flaw allows a remote attacker who has already compromised the renderer process to potentially achieve a sandbox escape by using a specially crafted HTML page. Type confusion occurs when a program allocates a resource as one type but accesses it as another, potentially leading to memory corruption or unauthorized code execution.

Recommendations Update Google Chrome to version 150.0.7871.47 or later.

Fix

Type Confusion

Weakness Enumeration

CWE-843

Related Identifiers

CVE-2026-13803

ECHO-6D57-119E-C59F

OPENSUSE-SU-2026:11184-1

OPENSUSE-SU-2026:21279-1

Affected Products

Google Chrome

References · 452

• https://nvd.nist.gov/vuln/detail/CVE-2026-13803 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-13803 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13803 · Security Note
• https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:21279-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:11184-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-13803 · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-14107 · Note
• https://suse.com/security/cve/CVE-2026-13884 · Note
• https://suse.com/security/cve/CVE-2026-14078 · Note
• https://suse.com/security/cve/CVE-2026-13801 · Note
• https://suse.com/security/cve/CVE-2026-14429 · Note
• https://suse.com/security/cve/CVE-2026-14154 · Note
• https://suse.com/security/cve/CVE-2026-13940 · Note
• https://suse.com/security/cve/CVE-2026-13980 · Note