CVE-2026-14382

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Affected products

Google Chrome

Google Chrome

< 150.0.7871.46

CVSS 3.1

9.6 CRITICAL

EPSS

0.3% (27th percentile)

Weakness

CWE-20

NVD status

Analyzed

Published

2026-07-01