CVE-2026-13899 is a use-after-free vulnerability in the HTML processing of Google Chrome prior to version 150.0.7871.47. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary code inside the browser's sandbox environment by delivering a specially crafted HTML page. The vulnerability is rated with a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported at the time of publication. The vendor has published an advisory indicating the availability of a stable channel update addressing this issue.

Successful exploitation of this vulnerability could lead to arbitrary code execution within the sandboxed environment of Google Chrome, potentially compromising the confidentiality, integrity, and availability of the affected system. The high CVSS score reflects the significant risk posed by this flaw if exploited.

A fix is available in Google Chrome version 150.0.7871.47. Users and administrators should update affected Chrome installations to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for detailed update instructions.