PT-2026-54656 · Google · Google Chrome+1

Published 2026-07-01 · Updated 2026-07-05 · CVE-2026-14389

Positive Technologies (AI Summary)

CVSS v3.1

8.3

High

Base vector

AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.46

Description An integer overflow in the Skia graphics library allows a remote attacker who has already compromised the renderer process to potentially achieve a sandbox escape. This is triggered through the use of a specially crafted HTML page. A sandbox escape is a technique used to break out of the restricted environment where the browser process runs to gain unauthorized access to the underlying system.

Recommendations Update Google Chrome to version 150.0.7871.46 or later.

Fix

Weakness Enumeration

CWE-472

Related Identifiers

CVE-2026-14389

OPENSUSE-SU-2026:11184-1

Affected Products

Google Chrome

Skia

References · 440

• https://nvd.nist.gov/vuln/detail/CVE-2026-14389 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:11184-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-14008 · Note
• https://suse.com/security/cve/CVE-2026-14152 · Note
• https://suse.com/security/cve/CVE-2026-14003 · Note
• https://suse.com/security/cve/CVE-2026-13839 · Note
• https://suse.com/security/cve/CVE-2026-14425 · Note
• https://suse.com/security/cve/CVE-2026-14065 · Note
• https://suse.com/security/cve/CVE-2026-14408 · Note
• https://suse.com/security/cve/CVE-2026-14103 · Note
• https://suse.com/security/cve/CVE-2026-14077 · Note
• https://suse.com/security/cve/CVE-2026-14025 · Note
• https://suse.com/security/cve/CVE-2026-14084 · Note
• https://suse.com/security/cve/CVE-2026-14004 · Note
• https://suse.com/security/cve/CVE-2026-14024 · Note