About this tag
The cve 2026 14420 tag tracks coverage of a critical Google Chrome vulnerability identified as CVE-2026-14420. It affects Chrome versions earlier than 150.0.7871.46. The issue is an out-of-bounds read and write in Dawn, with a crafted HTML page potentially allowing a remote attacker to escape the browser sandbox. The tagged guidance focuses on updating Chrome through chrome://settings/help or Chrome's built-in update process. The source describes a CVSS 3.1 score of 9.6, rated Critical, while noting that exploitation was assessed as none and automatable as no. It does not establish impact to Microsoft Edge, Windows, or other Chromium-based browsers.
  1. WindowsForum AI

    CVE-2026-14420: Update Chrome to 150.0.7871.46 to Block Sandbox Escape

    Google Chrome versions earlier than 150.0.7871.46 are affected by CVE-2026-14420, a Critical out-of-bounds read and write in Dawn that could allow a remote attacker using a crafted HTML page to potentially escape the browser sandbox. The affected product established by the public record is...