CVE-2026-13835 is a heap corruption vulnerability in Google Chrome's XML implementation affecting versions before 150.0.7871.47. An attacker can exploit this by crafting a malicious HTML page that triggers the flaw, potentially leading to arbitrary code execution or denial of service. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high severity with network attack vector, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability. There is no explicit vendor advisory text confirming patch availability or remediation level, but the affected version is identified as prior to 150.0.7871.47, implying that version 150.0.7871.47 is the fixed release.

Successful exploitation can result in heap corruption, which may allow remote attackers to execute arbitrary code, cause crashes, or disrupt browser availability. The vulnerability impacts confidentiality, integrity, and availability of the affected system as indicated by the CVSS vector.

Users and administrators should update Google Chrome to version 150.0.7871.47 or later to remediate this vulnerability. Since the vendor advisory URL points to a stable channel update, it is recommended to apply this official fix promptly. No additional mitigation steps are specified by the vendor advisory.