CVE-2026-13801 is an integer overflow vulnerability in the Chromecast feature of Google Chrome versions before 150.0.7871.47. A remote attacker with control over the renderer process could exploit this flaw via a specially crafted HTML page to perform a sandbox escape, potentially increasing their privileges or access beyond the renderer sandbox. The vulnerability is publicly disclosed with high severity, but no CVSS score or explicit remediation level is provided. A vendor advisory URL is available but does not explicitly confirm patch status in the provided data.

Successful exploitation could allow an attacker who has compromised the renderer process to escape the sandbox environment, potentially leading to greater control over the host system. This elevates the risk of further compromise beyond the renderer sandbox. No known exploits in the wild are reported at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until official fixes are confirmed, users should apply updates promptly once available and follow any vendor recommendations.