CVE-2026-13975 is an out of bounds read vulnerability in the ANGLE graphics abstraction layer used by Google Chrome on Mac. It affects versions prior to 150.0.7871.47. Exploitation requires that the attacker has already compromised the renderer process and can cause the browser to process a specially crafted HTML page, resulting in the disclosure of potentially sensitive memory contents. The vulnerability does not impact integrity or availability, only confidentiality. The CVSS vector indicates network attack vector, high attack complexity, no privileges required, user interaction required, unchanged scope, and high confidentiality impact.

Successful exploitation can lead to unauthorized disclosure of sensitive information from the process memory of the Chrome renderer on Mac. There is no indication of impact on integrity or availability. No known exploits are reported in the wild at this time.

Users should update Google Chrome on Mac to version 150.0.7871.47 or later, where this vulnerability is fixed. The vendor advisory linked confirms this stable channel update addresses the issue. No additional mitigation steps are indicated.