This vulnerability (CVE-2026-13833) arises from uninitialized use in the ANGLE graphics layer of Google Chrome on Mac systems. It permits a remote attacker to leak cross-origin data through a specially crafted HTML page. The vulnerability affects versions of Chrome before 150.0.7871.47. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high confidentiality impact. No official remediation level or patch confirmation is stated in the vendor advisory, though the affected version suggests the issue is fixed in 150.0.7871.47.

Successful exploitation can lead to unauthorized disclosure of cross-origin data, compromising user privacy and potentially exposing sensitive information. The integrity and availability of the system are not impacted. The medium severity rating reflects the confidentiality impact without elevation of privileges or denial of service.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Users should update to Chrome version 150.0.7871.47 or later once confirmed. Until then, avoid visiting untrusted or suspicious websites that could exploit this vulnerability.