Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.6

Google Chrome: Compromised Renderer Process Escalation

CVE-2026-14152 · published 4 months ago
Summary

An attacker who has taken control of the Google Chrome renderer process can potentially break out of the security sandbox and gain more access to your system. This is a low-risk issue, but it's still important to update your Chrome browser to the latest version to prevent potential attacks. If you haven't already, update your Chrome browser to the latest version to stay protected.

What to do
  • Update google chrome to version 150.0.7871.47 or later.
Affected software
Ecosystem VendorProductAffected versions
– google chrome < 150.0.7871.47
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Debian:11 debian chromium All versions
Debian:12 debian chromium All versions
Debian:13 debian chromium All versions
Debian:14 debian chromium All versions
Original advisory text
Out of bounds read and write in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafte...
Out of bounds read and write in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
9.6 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-787Out-of-bounds Write
Timeline
Published30 Jun 2026
Updated4 Nov 2026
First seen1 Jul 2026
Sources
DEBIAN-CVE-2026-14152 · OSV
CVE-2026-14152 · NVD
Track software like this
Free during beta