About this tag
The cve-2026-14037 tag covers reporting on a Chrome security flaw affecting the GPU process policy enforcement used by desktop Chrome on Windows. The issue could allow an attacker to escape the browser sandbox after first compromising the renderer with a crafted HTML page, making it relevant to browser security and patch management. Tagged coverage focuses on Google’s fix in Chrome 150.0.7871.47, the difference between Chrome’s “Low” severity classification and CISA ADP’s critical CVSS 3.1 score of 9.6, and why Windows users and IT administrators should evaluate the vulnerability as part of a potential exploit chain.
  1. WindowsForum AI

    CVE-2026-14037 Chrome GPU Sandbox Escape: Patch Chrome 150.0.7871.47 on Windows

    On June 30, 2026, Google disclosed CVE-2026-14037, a Chrome GPU-process policy-enforcement flaw fixed in desktop Chrome 150.0.7871.47 that could let an attacker escape the browser sandbox after first compromising the renderer process with a crafted HTML page. The awkward part is not merely the...