CVE-2026-13790 is a side-channel information leakage vulnerability affecting the Scroll functionality in Google Chrome before version 150.0.7871.47. An attacker can exploit this vulnerability remotely by crafting a malicious HTML page that leaks cross-origin data, violating the same-origin policy. The vulnerability has been assigned a CVSS 3.1 base score of 6.5 (medium severity), with an attack vector of network, low attack complexity, no privileges required, user interaction required, and impact limited to confidentiality. There is no explicit vendor advisory content confirming a patch or remediation level, but the affected versions are those prior to 150.0.7871.47, implying that the fixed version is 150.0.7871.47.

The vulnerability allows remote attackers to leak sensitive cross-origin information via a side-channel attack on the Scroll feature. This compromises confidentiality but does not affect integrity or availability. No known exploits in the wild have been reported, reducing immediate risk but the potential for data leakage remains until patched.

Users and administrators should update Google Chrome to version 150.0.7871.47 or later to remediate this vulnerability. Patch status is not explicitly confirmed in the vendor advisory, but the version numbering indicates the fix is included in 150.0.7871.47. Until updated, avoid visiting untrusted or suspicious websites that could exploit this issue.