CVE-2026-13834

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Score
CVSS 3.1 8.3 High
Status
Analyzed - chrome-cve-admin@google.com
Published
2026-06-30
Last modified
2026-10-25
Weaknesses
CWE-20

Affected products

References