CVE-2026-137899.6CriticalCWE-416

CVE-2026-13789: Google Chrome vulnerability

Google · Chrome

Vendor fix available · Affected: Google Chrome · Exploitation: not established

ExploitationNot established

Not in CISA KEV as of catalogue 2026.11.13 (13 Nov)

In CISA KEV: not seen
Exploited (reported): not seen
Scanning observed: not seen
Proof of concept public: not seen
Not establishedNothing in the sources we check

0.3%probability of exploitation in the next 30 days

28th percentile

050100

Higher than 28% of scored CVEs

9.6CriticalCVSS

LowMediumHighCrit.

DescriptionNVD

Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Use After Free · Memory Corruption
Vendor: Google
Published: June 2026
Band: Unlikely (under 1%), June 2026

Coverage1 article · 1 outlet

First in our coverage: Malwarebytes, 1 Jul.

1 Jul 11:46
Google Chrome Fixes 382 Bugs, Including Critical Sandbox Escape
Malwarebytes · first in our coverage

New articles also arrive in the RSS feed.