Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.6
CVE-2026-14152: Google Chrome: Compromised Renderer Process Escalation
CVE-2026-14152 · published 3 months ago
Summary
An attacker who has taken control of the Google Chrome renderer process can potentially break out of the security sandbox and gain more access to your system. This is a low-risk issue, but it's still important to update your Chrome browser to the latest version to prevent potential attacks. If you haven't already, update your Chrome browser to the latest version to stay protected.
What to do
- Update google chrome to version 150.0.7871.47 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | chrome |
< 150.0.7871.47 cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* |
|
| Debian:11 | debian | chromium | All versions |
| Debian:12 | debian | chromium | All versions |
| Debian:13 | debian | chromium | All versions |
| Debian:14 | debian | chromium | All versions |
Original advisory text
Out of bounds read and write in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafte...
Out of bounds read and write in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)
References
- https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_... Release Notes
- https://issues.chromium.org/issues/517534944 Permissions Required
- https://security-tracker.debian.org/tracker/CVE-2026-14152 Vendor Advisory
Severity
9.6
Critical
CVSS 3.1: 9.6 (NVD)
CVSS 3.1: 9.6 (OSV)
Exploitation
EPSS <1%
Type
CWE-787Out-of-bounds Write
Timeline
Published30 Jun 2026
Updated28 Sep 2026
First seen1 Jul 2026
Track software like this
Free during beta