CVE-2026-13775: Use after free in GPU in Google Chrome prior to 150

Synopsis

A use-after-free vulnerability in the GPU component of Google Chrome prior to version 150.0.7871.47 allows a remote attacker who has already compromised the renderer process to escape the browser sandbox via a crafted HTML page. The attack is reachable over the network and requires no authentication, though the victim must visit or be redirected to a malicious page. Successful exploitation gives the attacker code execution outside the sandbox, with full read, write, and availability impact on the host. A patched-image rebuild at version 150.0.7871.47 is available on HarborGuard for environments running an affected version of Chrome.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker delivers the exploit over the network; the target Chrome instance must be reachable by the victim browsing to an attacker-controlled or compromised web page.

• AuthenticationNot required

  No credentials or account privileges are required; any user browsing to the malicious page is a viable target.

• Victim interactionRequired

  The victim must visit or be directed to a crafted HTML page, making this a social-engineering or drive-by-style delivery.

• Attack complexityDetail

  Attack complexity is low, meaning the exploit is reliable and does not depend on race conditions, specific memory layouts, or other unpredictable environmental factors beyond the renderer-process compromise prerequisite.

Blast Radius

• The attacker escapes the Chrome sandbox and gains code execution in the context of the host process, breaking the primary isolation boundary Chrome relies on.
• With sandbox escape achieved, the attacker reads files, credentials, and session tokens accessible to the browser process on the host.
• The attacker writes or modifies files on disk and can persist malicious code or tamper with locally stored data.
• The attacker disrupts or terminates host-level processes, causing service or system instability on the affected machine.