CVE-2026-14017: Inappropriate implementation in Navigation in Google Chrome prior to 150

Synopsis

This is a sandbox escape vulnerability in Google Chrome's navigation implementation affecting versions prior to 150.0.7871.47. A remote attacker who has already compromised the Chrome renderer process can exploit this flaw by luring a victim to a crafted HTML page, breaking out of the browser sandbox to gain access to the underlying host system. Successful exploitation enables full confidentiality loss, data tampering, and service disruption on the affected host. A patched-image rebuild at version 150.0.7871.47 is available on HarborGuard for environments running an affected version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker delivers the crafted HTML page over the network, so the target must be reachable via a browser session to an attacker-controlled or compromised site.

• AuthenticationNot required

  No account or credentials are needed; any user who visits the malicious page is a valid target.

• Victim interactionRequired

  The victim must open a crafted HTML page, making this a social-engineering vector where the attacker must induce a user to visit or load the malicious content.

• Attack complexityDetail

  Attack complexity is low, meaning the exploit is reliable and does not depend on race conditions, specific memory layouts, or other unpredictable environmental factors, though a prior renderer compromise is a prerequisite.

Blast Radius

• An attacker who succeeds reads files, credentials, and session data accessible to the browser process on the host.
• Sandbox escape allows writing or modifying files on the host filesystem outside the browser's sandboxed storage.
• The attacker gains code execution outside the browser sandbox, enabling persistence mechanisms or lateral movement on the host.
• The exploit can crash or destabilize host-level processes, disrupting service availability beyond just the browser tab.