CVE-2026-14427
HighCVSS 8.3Exploitation Probability (EPSS)
Low risk16th percentile — higher than 16% of all known CVEs
Summary
A heap buffer overflow vulnerability in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue has a critical severity rating according to Chromium.
Risk Assessment
An attacker can exploit this vulnerability to break out of the browser's sandbox and gain access to the underlying operating system, posing a serious threat to the confidentiality and integrity of organizational data.
Recommendation
Immediately update Google Chrome to version 150.0.7871.46 or later. Ensure that the update policy covers all user workstations.
Original NVD description (English source)
Heap buffer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)