CVE-2026-13782 is a use-after-free vulnerability (CWE-416) in the Browser component of Google Chrome before version 150.0.7871.47. An attacker who has already compromised the renderer process could exploit this flaw via a crafted HTML page to perform a sandbox escape, potentially gaining elevated privileges or executing arbitrary code outside the sandbox. The vulnerability has a CVSS v3.1 base score of 9.6, indicating critical severity with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. The vendor advisory link is provided but does not explicitly state the patch or remediation status.

Successful exploitation could allow a remote attacker with control over the renderer process to escape the Chrome sandbox, leading to potential full system compromise including unauthorized code execution with elevated privileges. This impacts confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution with untrusted content and consider applying any available updates promptly once released.