PT-2026-54694 · Google · Google Chrome+1

Published 2026-07-01 · Updated 2026-07-05 · CVE-2026-14427

Positive Technologies (AI Summary)

CVSS v3.1

8.3

High

Base vector

AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.46

Description A heap buffer overflow exists in Skia, a graphics library used by the browser. This issue allows a remote attacker who has already compromised the renderer process to potentially achieve a sandbox escape by using a specially crafted HTML page. A sandbox escape is a technique used to break out of the restricted environment where the browser process runs to gain unauthorized access to the rest of the system.

Recommendations Update Google Chrome to version 150.0.7871.46 or later.

Fix

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

CVE-2026-14427

OPENSUSE-SU-2026:11184-1

Affected Products

Google Chrome

Skia

References · 440

• https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-14427 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:11184-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-14008 · Note
• https://suse.com/security/cve/CVE-2026-14152 · Note
• https://suse.com/security/cve/CVE-2026-14003 · Note
• https://suse.com/security/cve/CVE-2026-13839 · Note
• https://suse.com/security/cve/CVE-2026-14425 · Note
• https://suse.com/security/cve/CVE-2026-14065 · Note
• https://suse.com/security/cve/CVE-2026-14408 · Note
• https://suse.com/security/cve/CVE-2026-14103 · Note
• https://suse.com/security/cve/CVE-2026-14077 · Note
• https://suse.com/security/cve/CVE-2026-14025 · Note
• https://suse.com/security/cve/CVE-2026-14084 · Note
• https://suse.com/security/cve/CVE-2026-14004 · Note