CVE-2026-13783 is a use-after-free vulnerability in the Views component of Google Chrome versions before 150.0.7871.47. An attacker who persuades a user to engage in certain UI gestures on a maliciously crafted HTML page could trigger heap corruption, potentially leading to arbitrary code execution or other severe impacts. The vulnerability is classified under CWE-416 (Use After Free). The CVSS v3.1 base score is 9.6, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability.

Successful exploitation can lead to heap corruption, which may allow remote attackers to execute arbitrary code, cause denial of service, or otherwise compromise the affected system's confidentiality, integrity, and availability.

A fixed version, 150.0.7871.47, has been released by Google to address this vulnerability. Users and administrators should update to this version or later to remediate the issue. The vendor advisory linked provides official update details. Patch status beyond this version is not explicitly stated, so users should verify they are running at least 150.0.7871.47 or newer.