CVE-2026-14044: Use after free in ANGLE in Google Chrome prior to 150

Synopsis

Use-after-free in ANGLE (the graphics layer inside Google Chrome) allows a remote attacker who has already compromised the Chrome renderer process to escape the browser sandbox via a crafted HTML page. The vulnerability is reachable over the network and requires no authentication, though it does require the victim to visit a malicious page; successful exploitation gives the attacker full read, write, and crash capabilities beyond the sandbox boundary. A patched-image rebuild at Chrome 150.0.7871.47 is available on HarborGuard for environments running an affected version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker delivers the exploit over the network by directing the victim to a crafted HTML page hosted on an attacker-controlled server.

• AuthenticationNot required

  No account or credential is needed; the attacker only needs the victim to load a page.

• Victim interactionRequired

  The victim must visit a crafted HTML page, making social engineering (phishing link, malicious ad, redirect) a necessary step in the attack chain.

• Attack complexityDetail

  Attack complexity is Low, meaning the exploit is reliable and requires no special race condition, memory-layout luck, or environmental precondition beyond the renderer compromise already described in the vulnerability.

Blast Radius

• An attacker who achieves sandbox escape reads files and secrets accessible to the Chrome process on the host, including stored credentials and session data.
• The attacker gains the ability to write to the filesystem or execute arbitrary code outside the browser sandbox at the privilege level of the running Chrome process.
• The attacker can crash the host process or destabilize the operating environment beyond the browser, causing service disruption to the affected workload.
• Because the scope is changed (S:C in the CVSS vector), impact extends beyond the browser sandbox boundary to other components or containers sharing the host.