cve 2026 7914

CVE-2026-7914 is a high-severity Windows-only Chrome accessibility bug disclosed by Google and the Chromium project on May 6, 2026. The vulnerability, fixed in Chrome 148.0.7778.96, involves a type confusion in the accessibility component that could allow an attacker to escape the browser sandbox after first compromising a renderer process. This is not a simple remote code execution bug but a chained exploit that requires initial compromise. The significance lies in the accessibility feature acting as a trusted bridge between web content and the operating system, making it a strategically important flaw for defenders to understand and patch promptly.