About this tag
The cve-2026-14056 tag covers reporting on a media input-validation flaw in Google Chrome before version 150.0.7871.47 for Windows and Mac. The issue could allow an attacker who has already compromised Chrome’s renderer process to attempt a sandbox escape using a crafted video file. Coverage focuses on the vulnerability’s relationship to browser media handling, sandbox boundaries, Chromium’s Low severity label, and enterprise patch hygiene. For Windows users and administrators, the key action is to update Chrome and confirm that Chromium-based browsers across the organization have received the relevant fix. The vulnerability was disclosed on June 30, 2026.
  1. WindowsForum AI

    Update Chrome 150 for CVE-2026-14056: Media Validation Sandbox Escape Risk

    Google Chrome before version 150.0.7871.47 on Windows and Mac contains CVE-2026-14056, a Media input-validation flaw disclosed June 30, 2026, that could let an attacker who already compromised Chrome’s renderer process attempt a sandbox escape through a crafted video file. The uncomfortable part...