PT-2026-54684 · Google · Dawn+1

Published 2026-07-01 · Updated 2026-07-09 · CVE-2026-14417

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.46

Description A use-after-free issue exists in Dawn, which can allow a remote attacker to potentially perform a sandbox escape by using a crafted HTML page. A use-after-free occurs when an application continues to use a pointer after it has been freed, which can lead to crashes or arbitrary code execution.

Recommendations Update Google Chrome to version 150.0.7871.46 or later.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-14417

OPENSUSE-SU-2026:11184-1

OPENSUSE-SU-2026:21279-1

Affected Products

Google Chrome

Dawn

References · 448

• https://osv.dev/vulnerability/DEBIAN-CVE-2026-14417 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-14417 · Vendor Advisory
• https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:21279-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:11184-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-14417 · Security Note
• https://suse.com/security/cve/CVE-2026-14107 · Note
• https://suse.com/security/cve/CVE-2026-13884 · Note
• https://suse.com/security/cve/CVE-2026-14078 · Note
• https://suse.com/security/cve/CVE-2026-13801 · Note
• https://suse.com/security/cve/CVE-2026-14429 · Note
• https://suse.com/security/cve/CVE-2026-14154 · Note
• https://suse.com/security/cve/CVE-2026-13940 · Note
• https://suse.com/security/cve/CVE-2026-13980 · Note
• https://suse.com/security/cve/CVE-2026-13838 · Note