CVE-2026-13776 is a critical type confusion bug (CVSS 9.8) in Dawn in Google Chrome before 150.0.7871.47. Chromium rates it Critical. It could let an attacker who already compromised the renderer process escape the sandbox with a crafted HTML page. Update Chrome to 150.0.7871.47 or later.
What's affected
The record says Google Chrome prior to 150.0.7871.47 is affected, on Windows, macOS and Linux. The fixed version is 150.0.7871.47 or later. The record points to the June 2026 Chrome stable channel update post for the desktop release notes. That page loads its content with scripts and did not render for our fetch, so open it in a browser to see the exact build numbers per platform.
Other Chromium based browsers take Chromium fixes on their own schedule, so check each vendor.
How to check if you're exposed
Open chrome://version in the address bar and read the version number. Anything below 150.0.7871.47 is in range. To trigger an update, open the three dot menu, choose Help, then About Google Chrome, and relaunch when asked.
For managed fleets, check the version through your device management console or with a script that reads the installed Chrome version on each platform.
What to do now
- Open chrome://version and check the build is 150.0.7871.47 or later.
- Use About Google Chrome to update and relaunch the browser.
- Confirm your fleet policy lets Chrome update, and relaunch long running sessions.
- Check other Chromium based browsers and embedded runtimes such as Electron apps against their vendor advisories.
- Keep an eye on the Chrome releases blog for new stable updates.
Why it matters
Type confusion happens when code treats an object as one type when it is really another, so reads and writes land in the wrong place in memory. The record lists the class as access of a resource using an incompatible type. Dawn is the component Chrome uses to implement the WebGPU interface, so it handles input from web content.
As with other bugs in this release, the record says the attacker needs a compromised renderer first. It is a sandbox escape step. The record does not flag it as known exploited.
The record lists this weakness class: CWE-843 (Access of Resource Using Incompatible Type (Type Confusion)).
Quick check
What is Dawn?
Dawn is a Chromium component listed in the record as the location of the bug. We rely on the record for that and give no more detail than it does.
Sources
Last reviewed: 19 October 2026.
