CVE Catalog

CVE-2026-14397

CriticalCVSS 9.6
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.25%

17th percentile — higher than 17% of all known CVEs

Summary

An out-of-bounds write vulnerability in the ANGLE component of Google Chrome on Mac prior to version 150.0.7871.46 allows a remote attacker to potentially escape the sandbox via a crafted HTML page.

Risk Assessment

An attacker could exploit this vulnerability to execute code outside the browser's sandbox, potentially leading to system compromise or data theft.

Recommendation

Immediately update Google Chrome on Mac systems to version 150.0.7871.46 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

Out of bounds write in ANGLE in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS