PT-2026-54384

CVE-2026-14109

·

Published

2026-05-16

·

Updated

2026-09-10

Description by

CVSS 2.0
10
Critical
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47
Description Insufficient policy enforcement in Mojo allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Mojo is an inter-process communication (IPC) framework used by Chrome to communicate between different processes.
Recommendations Update Google Chrome to version 150.0.7871.47 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
ECHO-9434-53F2-6B17
OPENSUSE-SU-2026:11184-1
OPENSUSE-SU-2026:21279-1
OPENSUSE-SU-2026:21498-1
Found an issue in the description? Have something to add? Feel free to write us 👾