CVE-2026-13861 is a use-after-free vulnerability in the Core of Google Chrome versions before 150.0.7871.47. Exploitation requires that an attacker has already compromised the renderer process and can leverage a crafted HTML page to potentially perform a sandbox escape. The vulnerability is tracked as CWE-416 and has a CVSS v3.1 score of 9.6, indicating critical impact with network attack vector, low attack complexity, no privileges required, user interaction required, and complete confidentiality, integrity, and availability impact. No official remediation level or patch link is explicitly stated in the input data, but a vendor advisory URL is provided.

Successful exploitation could allow an attacker to escape the Chrome sandbox, potentially leading to full system compromise. The vulnerability affects confidentiality, integrity, and availability with high severity. However, there are no known exploits in the wild at the time of this report.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Users should update to version 150.0.7871.47 or later once the patch is available. Until then, no specific mitigations are provided.