PT-2026-54686 · Google · Google Chrome+1

Binglin Song · Published 2026-07-01 · Updated 2026-07-05 · CVE-2026-14419

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.46

Description A use after free issue in Skia, a graphics library, allows a remote attacker to potentially perform a sandbox escape by using a crafted HTML page. A use after free occurs when a program continues to use a pointer after it has been freed, which can lead to crashes or arbitrary code execution.

Recommendations Update Google Chrome to version 150.0.7871.46 or later.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-14419

OPENSUSE-SU-2026:11184-1

Affected Products

Google Chrome

Skia

References · 442

• https://nvd.nist.gov/vuln/detail/CVE-2026-14419 · Security Note
• https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:11184-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-14419 · Note
• https://suse.com/security/cve/CVE-2026-13956 · Note
• https://suse.com/security/cve/CVE-2026-13931 · Note
• https://suse.com/security/cve/CVE-2026-14050 · Note
• https://suse.com/security/cve/CVE-2026-13970 · Note
• https://suse.com/security/cve/CVE-2026-14148 · Note
• https://suse.com/security/cve/CVE-2026-13821 · Note
• https://suse.com/security/cve/CVE-2026-13902 · Note
• https://suse.com/security/cve/CVE-2026-14062 · Note
• https://suse.com/security/cve/CVE-2026-13897 · Note
• https://suse.com/security/cve/CVE-2026-13795 · Note
• https://suse.com/security/cve/CVE-2026-14025 · Note