PT-2026-54106 · Google · Google Chrome

Legiosec · Published 2026-06-30 · Updated 2026-07-09 · CVE-2026-13829

Positive Technologies (AI Summary)

CVSS v3.1

8.3

High

Base vector

AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47

Description Insufficient validation of untrusted input in Settings allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. A sandbox escape is a technique used to break out of the restricted environment where the browser process runs to gain unauthorized access to the underlying operating system.

Recommendations Update Google Chrome to version 150.0.7871.47 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2026-13829

ECHO-8CA4-FF6D-398F

OPENSUSE-SU-2026:11184-1

OPENSUSE-SU-2026:21279-1

Affected Products

Google Chrome

References · 450

• https://osv.dev/vulnerability/DEBIAN-CVE-2026-13829 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-13829 · Security Note
• https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:21279-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-13829 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:11184-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13829 · Security Note
• https://suse.com/security/cve/CVE-2026-14107 · Note
• https://suse.com/security/cve/CVE-2026-13884 · Note
• https://suse.com/security/cve/CVE-2026-14078 · Note
• https://suse.com/security/cve/CVE-2026-13801 · Note
• https://suse.com/security/cve/CVE-2026-14429 · Note
• https://suse.com/security/cve/CVE-2026-14154 · Note
• https://suse.com/security/cve/CVE-2026-13940 · Note
• https://suse.com/security/cve/CVE-2026-13980 · Note