CVE-2026-13814 is a use-after-free vulnerability in the Views component of Google Chrome versions before 150.0.7871.47. Exploitation requires user interaction with specific UI gestures triggered by a maliciously crafted HTML page, potentially leading to heap corruption. The vulnerability is rated high severity with a CVSS 3.1 score of 7.5, indicating network attack vector, high impact on confidentiality, integrity, and availability, and requiring user interaction with high attack complexity.

Successful exploitation can result in heap corruption, which may allow an attacker to execute arbitrary code or cause a denial of service. The attack requires user interaction and specific UI gestures, limiting automatic exploitation. The vulnerability affects confidentiality, integrity, and availability of the affected system.

The vendor advisory linked indicates a stable channel update for Chrome but does not explicitly confirm patch availability in the provided data. Patch status is not yet confirmed—check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until confirmed patched, users should avoid interacting with untrusted web content that might trigger the vulnerability.