CVE Intelligence
Analysis AI-assisted

CVE-2026-13853: Google Chrome Journeys Use-After-Free Enabling Sandbox Escape

A use-after-free flaw in the Journeys feature of Google Chrome, described as affecting versions prior to 150.0.7871.47, could let a remote attacker who has already compromised the renderer process attempt a sandbox escape through a crafted HTML page. The record scores it 9.6 (critical) under CVSS and classifies it as CWE-416. The record shows no KEV listing, and no confirmed exploitation appears in the sources consulted.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

The record describes a use-after-free weakness in the Journeys feature of Google Chrome. According to the description, the issue is addressed in versions 150.0.7871.47 and later. The weakness is classified as CWE-416 (Use After Free).

Impact

  • The described attack requires a remote attacker who has already compromised the renderer process.
  • Under that precondition, the record states the attacker could potentially escape the browser sandbox using a crafted HTML page.
  • The CVSS 9.6 score reflects network reachability, low attack complexity, no privileges required, user interaction required, and high confidentiality, integrity and availability impact with a changed scope.

Affected products and versions

  • Product: Google Chrome.
  • The description refers to versions prior to 150.0.7871.47. The structured affected range lists versions below 150.0.7871.46. The exact boundary should be confirmed against the Chrome stable channel release notes.

Exploitation status

The record does not list this CVE in CISA KEV. No confirmed exploitation in the wild appears in the sources consulted for this analysis.

Remediation and mitigation

  • Update Google Chrome to version 150.0.7871.47 or later, following the vendor advisory referenced in the record.
  • Verify installed versions across managed endpoints, since the structured version boundary in the record differs slightly from the description.
  • Keep automatic updates enabled and prioritize browser updates on systems used for untrusted web browsing.

Detection guidance

  • Inventory Chrome versions across the environment and flag any installation below the fixed build.
  • Review endpoint telemetry for unexpected renderer crashes or browser process anomalies on systems that visit untrusted sites, as a general indicator of memory corruption attempts.

Limitations of the available information

  • The record's fixes field is empty, so the fixed build is taken from the description and the referenced vendor advisory.
  • The description and the structured affected range use different version boundaries (150.0.7871.47 and 150.0.7871.46).
  • No proof-of-concept details, exploitation timeline or threat actor information are present in the record.
  • The EPSS values are recorded as provided and are not evidence of exploitation.

Frequently asked questions

What is CVE-2026-13853?

It is a use-after-free vulnerability in the Journeys feature of Google Chrome that, according to the record, could allow a remote attacker who already compromised the renderer process to attempt a sandbox escape via a crafted HTML page.

What should administrators do?

Update Google Chrome to version 150.0.7871.47 or later, as described in the referenced vendor advisory, and verify installed versions across managed systems.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.