CVE-2026-13792 is a use-after-free vulnerability (CWE-416) affecting the Touchbar feature in Google Chrome on Mac platforms. Versions prior to 150.0.7871.47 are vulnerable. Exploitation could allow a remote attacker to perform a sandbox escape via a crafted HTML page, potentially leading to full compromise of the affected system. The vulnerability has a CVSS v3.1 base score of 9.6, indicating critical severity with network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability. There is no explicit vendor advisory text confirming patch availability or remediation level, but the affected version is stated as 150.0.7871.47, implying this version includes the fix. The vendor advisory URL points to a Chrome stable channel update announcement, which typically includes security fixes.

Successful exploitation of this vulnerability could allow an attacker to escape the Chrome sandbox on Mac systems, potentially leading to arbitrary code execution with elevated privileges. This compromises the confidentiality, integrity, and availability of the affected system. The critical CVSS score reflects the high impact and ease of exploitation over the network with minimal complexity.

The vulnerability is fixed in Google Chrome version 150.0.7871.47. Users and administrators should update to this version or later to remediate the issue. The vendor advisory linked corresponds to a stable channel update that includes this fix. No additional mitigations are specified by the vendor advisory.