CVE-2026-13909

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47

Description Insufficient policy enforcement in the DevTools component allows a remote attacker to potentially perform a sandbox escape. A sandbox is a security mechanism for separating running programs, ensuring that code executing in a restricted environment cannot access the rest of the system. An attacker can exploit this by luring a target to a crafted HTML page; after compromising the renderer process, the attacker can bypass security policy boundaries to execute actions outside the renderer constraints, potentially leading to broader system compromise.

Recommendations Update Google Chrome to version 150.0.7871.47 or later.