CVE-2026-14428

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 150.0.7871.46

Description Insufficient validation of untrusted input in Dawn, a WebGPU implementation, allows a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape. This is achieved by inducing the browser to process a crafted HTML page. A sandbox escape is a technique used to break out of the restricted environment where the browser process runs to gain unauthorized access to the underlying operating system.

Recommendations Update Google Chrome on Android to version 150.0.7871.46 or later.