PT-2026-54331 · Google · Google Chrome

CVE-2026-14056

·

Published

2026-04-12

·

Updated

2026-08-31

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47
Description Insufficient validation of untrusted input in the Media component allows a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape by using a crafted video file. A sandbox escape is a technique used to break out of the restricted environment where the browser process runs to gain unauthorized access to the underlying system.
Recommendations Update Google Chrome to version 150.0.7871.47 or later.

Fix

DoS

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-13503
CVE-2026-14056
ECHO-A160-BFD0-DEBA
OPENSUSE-SU-2026:11184-1
OPENSUSE-SU-2026:21279-1
OPENSUSE-SU-2026:21498-1

Affected Products

Google Chrome