CVE-2026-13898 is a use-after-free vulnerability in the Cast Receiver component of Google Chrome that affects versions prior to 150.0.7871.47. Exploitation requires user interaction (UI:R) and can be triggered remotely via a crafted HTML page, potentially allowing arbitrary code execution within the sandbox. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported at the time of publication. The vendor advisory URL indicates a stable channel update addressing this issue.

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code inside the sandboxed environment of the browser, potentially compromising confidentiality, integrity, and availability of the affected system. The attack vector is network-based and requires user interaction.

A fix is available in Google Chrome version 150.0.7871.47. Users and administrators should update affected Chrome installations to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for detailed update instructions.