CVE-2026-13790 is a side-channel information leakage vulnerability in the Scroll feature of Google Chrome. It affects versions before 150.0.7871.47 and enables a remote attacker to leak cross-origin data through a specially crafted HTML page. The vulnerability was publicly disclosed with a high severity rating by Chromium security. There is no CVSS score available, and the vendor advisory linked does not explicitly state the remediation status or patch availability, but the affected version indicates that 150.0.7871.47 is the fixed version.

An attacker can exploit this vulnerability to leak information across origins, potentially exposing sensitive data that should be isolated by the browser's same-origin policy. This compromises user privacy and security by allowing unauthorized access to cross-origin data.

Users and administrators should update Google Chrome to version 150.0.7871.47 or later, as this version addresses the vulnerability. Since this is a client-side browser vulnerability, applying the official update is the recommended remediation. Patch status is inferred from the affected version and vendor advisory URL; check the vendor advisory for confirmation.