CVE-2026-13846 is a use-after-free vulnerability (CWE-416) in the USB handling code of Google Chrome on Mac platforms before version 150.0.7871.47. An attacker who has already compromised the renderer process could exploit this flaw via a specially crafted HTML page to perform a sandbox escape, potentially gaining higher privileges or broader system access. The vulnerability has a CVSS v3.1 base score of 9.6, indicating critical severity with network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability. The vendor has published an advisory but has not explicitly stated the remediation level or patch availability in the provided data.

Successful exploitation could allow an attacker with control over the renderer process to escape the Chrome sandbox on Mac, leading to potential full system compromise or unauthorized access beyond the browser sandbox. This elevates the risk significantly as sandbox escapes undermine Chrome's security model.

The vendor advisory URL indicates a stable channel update for Chrome, implying that version 150.0.7871.47 or later addresses this issue. Users should update Google Chrome on Mac to version 150.0.7871.47 or later to mitigate this vulnerability. Patch status is not explicitly confirmed in the advisory content provided, so users should verify the update status via the official Chrome release notes or update mechanism.