CVE-2026-13032 is a use-after-free vulnerability in the WebGL implementation of Google Chrome on Android. It affects versions before 149.0.7827.197. Exploitation could lead to a sandbox escape, allowing an attacker to execute code outside the browser's restricted environment. The vulnerability has a CVSS v3.1 score of 9.6, indicating critical severity with network attack vector, low attack complexity, no privileges required, user interaction needed, and high impact on confidentiality, integrity, and availability. The vendor advisory linked is a Chrome stable channel update announcement, but it does not explicitly confirm the patch status for this specific issue.

Successful exploitation of this vulnerability could allow a remote attacker to escape the Chrome sandbox on Android devices, potentially leading to arbitrary code execution with elevated privileges. This compromises the confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The linked Google Chrome stable channel update announcement suggests an update around the affected version, but explicit confirmation of a fix for this vulnerability is not provided in the advisory. Users should update to version 149.0.7827.197 or later once confirmed by the vendor.