CVE-2026-14055: Insufficient validation of untrusted input in Device Trust in Google Chrome on Windows prior to 150

Synopsis

This is an insufficient input validation vulnerability in the Device Trust component of Google Chrome on Windows, affecting versions prior to 150.0.7871.47. The flaw is reachable over the network and requires no authentication, but does require a victim to interact with a crafted HTML page; additionally, the attacker must have already compromised the renderer process as a prerequisite. Successful exploitation enables a full sandbox escape, granting the attacker read access to confidential data, the ability to tamper with files or system state, and the ability to crash or disrupt the host. A patched-image rebuild at version 150.0.7871.47 is available on HarborGuard for affected environments.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker delivers the crafted HTML page over the network, so the victim's browser must be reachable from or directed to an attacker-controlled remote origin.

• AuthenticationNot required

  No account credentials or prior authentication are needed; the attack is launched against any user who visits the malicious page.

• Victim interactionRequired

  The victim must open or be redirected to a crafted HTML page, making this a social-engineering or drive-by-navigation scenario.

• Attack complexityDetail

  Exploit reliability is high and no special environmental conditions are required, though the attacker must already control the renderer process as a prerequisite stepping stone before triggering the sandbox escape.

Blast Radius

• Reads confidential data accessible to the browser process, including stored credentials, session tokens, and local files within the browser's reach.
• Modifies files or system state outside the sandbox boundary, including writing to arbitrary user-writable paths on the Windows host.
• Crashes or disrupts the affected Chrome process or dependent services on the host.
• Establishes a beachhead outside the browser sandbox, enabling further lateral movement or privilege escalation on the Windows system.