CVE-2026-14101

Critical · CVSS 9.6

Google Chrome — Sandbox escape via insufficient policy enforcement in renderer process

CVSS: 9.6; nvd
EPSS: 0.22%; 13th pct
KEV: No
Class: kernel local; CWE-269, CWE-693

Description

Insufficient policy enforcement in Sandbox in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)

Search profile — drives PoC discovery

Symbols Sandboxpolicy enforcementrenderer processsandbox escapecrafted HTML pageissues.chromium.org/issues/513454805

Keywords CVE-2026-14101Chrome sandbox escapeChromium sandbox Macrenderer sandbox escapeinsufficient policy enforcement sandboxChrome 150.0.7871.47CWE-269 ChromeCWE-693 ChromeChromium 513454805

Versions: prior to 150.0.7871.47

References

https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html
https://issues.chromium.org/issues/513454805

Status: enriched · ingested 2026-07-02T18:00:43.000Z · profiled 2026-07-02T18:30:43.000Z