CVE Intelligence
Analysis AI-assisted

CVE-2026-13846: Google Chrome for Mac USB Use-After-Free Sandbox Escape

A use-after-free flaw in the USB component of Google Chrome on Mac, prior to 150.0.7871.47, could let a remote attacker who had already compromised the renderer process attempt a sandbox escape through a crafted HTML page. The record lists a CVSS 3.1 base score of 9.6 and notes that Chromium rates the issue High. No confirmed exploitation appears in the sources consulted, and the CVE is not listed in CISA KEV.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

The record describes a use-after-free condition in the USB component of Google Chrome on macOS. According to the description, versions before 150.0.7871.47 are affected. The weakness is classified as CWE-416.

Impact

  • Exploitation requires an attacker who has already compromised the renderer process.
  • The record describes a potential sandbox escape delivered through a crafted HTML page.
  • The CVSS 3.1 vector indicates network attack vector, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity and availability.
  • The SSVC data in the record lists total technical impact.

Affected products and versions

  • Google Chrome on Mac, prior to 150.0.7871.47.
  • The affected range field in the record contains two entries, and the second one is internally contradictory, so the exact range should be confirmed against the vendor release notes linked below.

Exploitation status

  • The CVE is not listed in the CISA KEV catalog in the record.
  • No confirmed exploitation appears in the sources consulted.
  • The record's SSVC exploitation value is none and its automatable value is no.

Remediation and mitigation

  • Update Google Chrome on macOS to version 150.0.7871.47 or later, the version the description uses as the threshold. The vendor's Chrome Stable Channel Update is the reference to check.
  • Prioritize browser updates on systems that regularly handle untrusted web content.
  • Keep browser updates under routine change management, and verify the installed build after deployment.

Detection guidance

  • Inventory Chrome versions on macOS endpoints and flag any build older than 150.0.7871.47.
  • Review software update telemetry to confirm that updates were installed and that no hosts remain on older builds.

Limitations of the available information

  • The record has an empty fixes list, so the fixed version is taken from the affected-version description, not from a structured fix entry.
  • The vendor issue tracker entry is restricted and its content was not available for this analysis.
  • Scores come from the CNA and CISA-ADP entries, which agree on 9.6 under CVSS 3.1.
  • No public proof-of-concept or exploitation details were found in the sources consulted.

Frequently asked questions

Which Chrome versions are affected by CVE-2026-13846?

The record says Google Chrome on Mac versions before 150.0.7871.47 are affected. The affected range field contains a contradictory entry, so confirm the exact range in the vendor release notes.

Is CVE-2026-13846 being actively exploited?

The CVE is not listed in CISA KEV in the record, and no confirmed exploitation appears in the sources consulted.

What is the recommended action?

Update Google Chrome on macOS to 150.0.7871.47 or later and verify the installed build across managed endpoints.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.