The vulnerability CVE-2026-13797 in Google Chrome involves insufficient validation of untrusted input within the Chromecast feature. This flaw allows a remote attacker, who has already compromised the renderer process, to potentially perform a sandbox escape by delivering a crafted HTML page. The affected versions are Chrome versions prior to 150.0.7871.47. The vulnerability is classified as high severity by Chromium security. Although a vendor advisory link is provided, it does not explicitly confirm the availability of a patch or remediation level. The vulnerability does not affect cloud services and no known exploits have been reported in the wild.

A successful exploitation of this vulnerability could allow an attacker with control over the renderer process to escape the Chrome sandbox, potentially leading to further compromise of the host system. This elevates the risk beyond the renderer process sandbox, which is a critical security boundary in Chrome. No evidence of active exploitation in the wild has been reported.

The vendor advisory link is provided but does not explicitly confirm patch availability or remediation steps. Users should update to Chrome version 150.0.7871.47 or later once available, as this version is indicated as the fixed version. Until then, monitor official Google Chrome release notes for updates. No additional mitigation guidance is provided by the vendor advisory.