Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.6

Google Chrome: Compromised Renderer Process Escalation

CVE-2026-14152 · published 1 month ago
Summary

An attacker who has taken control of the Google Chrome renderer process can potentially break out of the security sandbox and gain more access to your system. This is a low-risk issue, but it's still important to update your Chrome browser to the latest version to prevent potential attacks. If you haven't already, update your Chrome browser to the latest version to stay protected.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software
VendorProductAffected versions
google chrome < 150.0.7871.47
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Original advisory text
Out of bounds read and write in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafte...
Out of bounds read and write in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)
References
Severity
9.6 Critical
CVSS 3.1: 9.6 (NVD)
Exploitation
EPSS <1%
Type
CWE-787Out-of-bounds Write
Timeline
Published30 Jun 2026
Updated15 Aug 2026
First seen1 Jul 2026
Sources
CVE-2026-14152 · NVD
Monitor software like this
Free during beta