CVE-2026-13923 is an uninitialized use vulnerability in the GPU component of Google Chrome on Android versions before 150.0.7871.47. This flaw allows a remote attacker to obtain potentially sensitive information from process memory by convincing a user to visit a maliciously crafted HTML page. The vulnerability has a CVSS 3.1 base score of 6.5, indicating medium severity, with an attack vector of network, low attack complexity, no privileges required, user interaction required, and high confidentiality impact but no integrity or availability impact. The vulnerability is publicly known and documented by Google, but no explicit remediation level or patch details are provided in the source data. The vendor advisory URL points to a Chrome stable channel update announcement, suggesting that the issue is addressed in version 150.0.7871.47.

Exploitation of this vulnerability can lead to disclosure of sensitive information from the process memory of the affected Chrome browser on Android. There is no impact on integrity or availability. The attack requires user interaction (visiting a crafted HTML page) and can be performed remotely over the network without privileges.

Users should update Google Chrome on Android to version 150.0.7871.47 or later to remediate this vulnerability. The vendor advisory indicates that the issue is fixed in this version. No additional mitigation steps are specified or required beyond applying the update.