CVE-2026-13791 is a vulnerability in Google Chrome's Downloads feature affecting versions before 150.0.7871.47. It stems from insufficient validation of untrusted input, enabling an attacker to execute arbitrary code by tricking a user into installing a crafted malicious Chrome extension. The vulnerability is rated high severity with a CVSS 3.1 base score of 8.1, reflecting high impact on confidentiality, integrity, and availability. The official Google Chrome release blog linked in the advisory likely contains update information, but explicit patch or remediation details are not provided in the input data.

Successful exploitation allows remote attackers to execute arbitrary code on the victim's system without privileges or user interaction beyond installing a malicious extension. This compromises system confidentiality, integrity, and availability. The vulnerability requires user interaction (installing a malicious extension) and has a high attack complexity.

A vendor advisory URL is provided, but no explicit patch or remediation level is stated in the input data. Since the vulnerability affects versions prior to 150.0.7871.47, updating Google Chrome to version 150.0.7871.47 or later is recommended. Patch status is not yet confirmed in the provided data—check the official Google Chrome release blog for current remediation guidance.