CVE-2026-15113 is a use-after-free vulnerability in the Autofill feature of Google Chrome on Android. It affects versions before 150.0.7871.115. Exploitation could allow a remote attacker to execute a sandbox escape via a specially crafted HTML page, compromising browser security boundaries. The vulnerability is rated critical with a CVSS 3.1 base score of 9.6, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability. Google has released Chrome version 150.0.7871.115 to fix this issue.

Successful exploitation of this vulnerability could allow a remote attacker to escape the Chrome sandbox on Android devices, potentially leading to full compromise of the browser environment and access to sensitive information or execution of arbitrary code. The high CVSS score indicates severe impact on confidentiality, integrity, and availability of the affected system.

Users should update Google Chrome on Android to version 150.0.7871.115 or later to remediate this vulnerability. The vendor advisory confirms the availability of this fix. No additional mitigation steps are specified beyond applying the official update.