CVE-2026-14392
Out of bounds write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Scoring
- Severity
- CRITICAL
- CVSS base score
- 9.6
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
- EPSS probability
- 0.34%
- CWE
- CWE-787
- Published
- 2026-07-01
- Last modified
- 2026-07-03
Affected products
- Google Chrome
Weakness type
Related vulnerabilities
- CVE-2026-45770 — Suricata lua: excessive flow variable registration can bypass sandbox
- CVE-2026-88053 — Tesseract: Heap out-of-bounds write in Classify::ReadIntTemplates via unvalidated counts in crafted .traineddata
- CVE-2026-88052 — Tesseract: Heap out-of-bounds write in UNICHARSET::load_via_fgets via count/insert desynchronization
- CVE-2026-88051 — Tesseract: Heap out-of-bounds write in GenericVector<T>::read due to independent reserved/size_used_ fields
- CVE-2026-88050 — Tesseract: Out-of-bounds write in UnicharCompress via unvalidated recoder code values
- CVE-2026-88049 — Tesseract: Heap out-of-bounds write in LSTM::Forward via na_/gate-matrix dimension mismatch
- CVE-2026-88048 — Tesseract: Heap out-of-bounds write/read in FullyConnected::Forward via layer/weight-matrix dimension mismatch
- CVE-2026-0310 — PAN-OS: Buffer Overflow Vulnerability via XML Processing