CVE-2026-6314
HighCVSS 8.3Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
In Google Chrome prior to version 147.0.7727.101, an out of bounds write in the GPU allowed a remote attacker who compromised the GPU process to potentially perform a sandbox escape via a crafted HTML page.
Risk Assessment
This vulnerability poses a high risk to organizations as it may lead to unauthorized access to systems and user data.
Recommendation
It is recommended to update Google Chrome to version 147.0.7727.101 or later to mitigate the risk associated with this vulnerability.
Other vulnerabilities in Google Chrome GPU
See all- CVE-2026-12023High
A use after free vulnerability in GPU in Google Chrome on Mac prior to version 149.0.7827.115 allowed a remote attacker who compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
- CVE-2026-8534High
Integer overflow in GPU in Google Chrome on Linux and ChromeOS prior to version 148.0.7778.168 allowed a remote attacker who compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
Original NVD description (English source)
Out of bounds write in GPU in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the GPU process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Vulnerability data from NVD (NIST) · CISA KEV · EPSS