CVE-2026-13875 is a medium severity vulnerability in Google Chrome's GPU component on Windows platforms before version 150.0.7871.47. The vulnerability arises from insufficient validation of untrusted input, enabling a remote attacker with control over the renderer process to extract potentially sensitive information from process memory by delivering a specially crafted HTML page. The CVSS vector indicates network attack vector, high attack complexity, no privileges required, user interaction required, unchanged scope, and high confidentiality impact without integrity or availability impact. The vendor has published an advisory linked to a stable channel update but does not explicitly state the remediation level or patch availability in the provided data.

An attacker who has compromised the renderer process can exploit this vulnerability to obtain sensitive information from process memory. This could lead to information disclosure but does not affect integrity or availability. The attack requires user interaction and has a high complexity, limiting ease of exploitation. There are no known exploits in the wild as of the published date.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until confirmation of a fix, users should exercise caution with untrusted content and ensure Chrome is updated to the latest available version.