CVE-2026-13961 is a medium severity vulnerability in Google Chrome's DevTools on Windows platforms before version 150.0.7871.47. It stems from insufficient validation of untrusted input, which can be exploited by a remote attacker who persuades a user to engage in certain UI gestures on a maliciously crafted HTML page. Successful exploitation may lead to disclosure of sensitive information from process memory. The vulnerability requires user interaction and has a high complexity due to the need for specific UI gestures. There is no indication of known exploits in the wild at this time.

An attacker can potentially access sensitive information from the process memory of the Chrome browser by exploiting insufficient input validation in DevTools. This could lead to information disclosure without impacting integrity or availability. The attack requires user interaction and has a network attack vector with high attack complexity.

Users should update Google Chrome to version 150.0.7871.47 or later, where this vulnerability is addressed. The vendor advisory linked confirms the availability of this stable channel update. No additional mitigations are indicated by the vendor advisory.