CVE-2026-13820 is an out of bounds read vulnerability in the Skia graphics library used by Google Chrome on Mac platforms. It affects versions prior to 150.0.7871.47. An attacker with control over the renderer process can exploit this flaw to leak data across origins via a specially crafted HTML page. The vulnerability was publicly disclosed and is rated high severity by Chromium security. No official remediation level or patch status is confirmed in the provided data, though a vendor advisory URL is available for further details.

The vulnerability enables a remote attacker who has compromised the renderer process to leak cross-origin data, potentially exposing sensitive information from other web origins. This compromises the same-origin policy enforcement in the browser, leading to confidentiality breaches.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Users should update to version 150.0.7871.47 or later once confirmed patched by the vendor.