CVE-2026-13789 is a use-after-free vulnerability in the GPU subsystem of Google Chrome versions before 150.0.7871.47. Exploitation requires that the attacker has already compromised the renderer process and can craft a malicious HTML page to trigger the vulnerability. Successful exploitation may lead to sandbox escape, allowing the attacker to execute code outside the restricted environment. The vulnerability is tracked as CWE-416 and has a CVSS v3.1 score of 9.6, indicating critical severity. The vendor has published an advisory but has not explicitly stated the remediation level or patch availability in the provided data.

If exploited, this vulnerability could allow an attacker to escape the Chrome sandbox, potentially leading to full code execution on the host system with elevated privileges. The confidentiality, integrity, and availability of the affected system could be severely impacted. However, exploitation requires prior compromise of the renderer process.

A fix is available in Google Chrome version 150.0.7871.47. Users and administrators should update to this version or later to remediate the vulnerability. Since this is not a cloud service, patching the client software is necessary. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for detailed update instructions.