PT-2026-54654 · Google · Google Chrome+1

Published 2026-07-01 · Updated 2026-07-05 · CVE-2026-14387

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.46

Description An integer overflow in Skia, a graphics library, allows a remote attacker to potentially perform a sandbox escape by inducing the browser to process a crafted HTML page. A sandbox escape is a technique used to bypass the security boundary that isolates the browser process from the rest of the operating system.

Recommendations Update Google Chrome to version 150.0.7871.46 or later.

Fix

Weakness Enumeration

CWE-472

Related Identifiers

CVE-2026-14387

OPENSUSE-SU-2026:11184-1

Affected Products

Google Chrome

Skia

References · 440

• https://nvd.nist.gov/vuln/detail/CVE-2026-14387 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:11184-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-14008 · Note
• https://suse.com/security/cve/CVE-2026-14152 · Note
• https://suse.com/security/cve/CVE-2026-14003 · Note
• https://suse.com/security/cve/CVE-2026-13839 · Note
• https://suse.com/security/cve/CVE-2026-14425 · Note
• https://suse.com/security/cve/CVE-2026-14065 · Note
• https://suse.com/security/cve/CVE-2026-14408 · Note
• https://suse.com/security/cve/CVE-2026-14103 · Note
• https://suse.com/security/cve/CVE-2026-14077 · Note
• https://suse.com/security/cve/CVE-2026-14025 · Note
• https://suse.com/security/cve/CVE-2026-14084 · Note
• https://suse.com/security/cve/CVE-2026-14004 · Note
• https://suse.com/security/cve/CVE-2026-14024 · Note