CVE Intelligence
Analysis AI-assisted

CVE-2026-13792: Google Chrome on macOS: Use-After-Free in Touch Bar Enables Possible Sandbox Escape

CVE-2026-13792 is a use-after-free flaw (CWE-416) in the Touch Bar component of Google Chrome on Mac, described as affecting versions prior to 150.0.7871.47. According to the record, a remote attacker could potentially escape the browser sandbox through a crafted HTML page, and the CVSS 3.1 base score is 9.6 (critical). The record does not list the CVE in CISA KEV, and no confirmed exploitation appears in the sources consulted.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

CVE-2026-13792 is a use-after-free weakness (CWE-416) in the Touch Bar component of Google Chrome on Mac. The description states that it affects versions prior to 150.0.7871.47 and could let a remote attacker potentially perform a sandbox escape via a crafted HTML page. Chromium rates its security severity as High, and the record publishes a CVSS 3.1 base score of 9.6.

Impact

  • Confidentiality, integrity and availability: the CVSS vector in the record marks all three as High (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
  • Scope: the vector shows a changed scope (S:C), meaning the scoring model treats the impact as extending beyond the vulnerable component.
  • User interaction: the vector requires user interaction (UI:R), which is consistent with a victim visiting a page.
  • The sandbox escape is described as potential. The sources consulted do not describe a demonstrated impact.

Affected products and versions

  • Google Chrome on Mac, versions prior to 150.0.7871.47, according to the description.
  • The record's affected list contains a second entry whose range reads as at or above 150.0.7871.47 and below 150.0.7871.47. That range is empty and internally inconsistent, so it should be treated as a data issue.
  • The record does not state whether other Chromium-based products or other platforms are affected.

Exploitation status

The record marks this CVE as not listed in the CISA KEV catalog. No confirmed exploitation in the wild appears in the sources consulted. The SSVC exploitation value is none and the SSVC automatable value is no. The EPSS probability is 0.00345 with a percentile of 0.26182, as recorded.

Remediation and mitigation

  • Update Google Chrome on macOS to version 150.0.7871.47 or later. The vendor release notes are listed in the references, including the Chrome stable channel update.
  • Confirm that automatic updates are enabled and not blocked by policy, and restart the browser after updating so the new version is active.
  • In managed environments, verify the deployed Chrome version across all macOS endpoints and track any systems that remain behind.
  • Until updates are applied, reduce exposure by limiting browsing of untrusted sites on unpatched systems.

Detection guidance

  • Inventory Chrome versions on macOS endpoints and flag installations older than 150.0.7871.47.
  • Review endpoint telemetry for unexpected browser crashes or abnormal child process behaviour in Chrome, as general indicators that warrant investigation. These are high-level signals and do not confirm exploitation.
  • Keep browser and endpoint logs available for review on systems that handled untrusted web content before patching.

Limitations of the available information

  • The record's fixes list is empty. The fixed version is inferred from the description's statement that earlier versions are affected, and the vendor release notes should be checked for the authoritative fix details.
  • The issue tracker entry is marked as requiring permissions, so no technical details were available in the sources consulted.
  • The macOS versions and Touch Bar hardware or software conditions are not specified.
  • The EPSS date in the record (2026-10-13) is later than the published date (2026-06-30). The score is reported as recorded without adjustment.
  • No public proof of concept information was present in the record.

Frequently asked questions

Is CVE-2026-13792 being actively exploited?

The record does not list this CVE in the CISA KEV catalog, and no confirmed exploitation in the wild appears in the sources consulted. The SSVC exploitation value is none.

What should administrators do?

Update Google Chrome on macOS to version 150.0.7871.47 or later, restart the browser, and verify the deployed version across managed endpoints.

Why is the affected version range unclear?

The record's affected list includes an empty second range. The description's statement that versions prior to 150.0.7871.47 are affected is the clearer basis, and the vendor release notes should be checked for details.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.