CVE-2026-14093: Use after free in Cast in Google Chrome prior to 150

Synopsis

A use-after-free vulnerability in the Cast component of Google Chrome prior to version 150.0.7871.47 allows a remote attacker who has already compromised the renderer process to escape the browser sandbox via a crafted HTML page. The attack is reachable over the network and requires no authentication, though victim interaction (visiting a malicious page) is necessary. Successful exploitation gives the attacker full read, write, and execution capability outside the sandbox, enabling data theft, file tampering, or arbitrary code execution on the host. A patched-image rebuild at version 150.0.7871.47 is available on HarborGuard for environments running an affected version of Chrome.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker delivers the exploit over the network by directing a victim to a crafted HTML page hosted remotely.

• AuthenticationNot required

  No account or credential is needed; any unauthenticated remote attacker can attempt delivery of the malicious page.

• Victim interactionRequired

  The victim must visit or be redirected to a crafted HTML page, making social engineering or a malicious ad/link the delivery mechanism.

• Attack complexityDetail

  Attack complexity is low, meaning the exploit is reliable and does not depend on race conditions, specific memory layouts, or other environmental factors beyond the pre-condition of renderer compromise.

Blast Radius

• A successful attacker escapes the Chrome sandbox and gains code execution in the context of the browser process on the host operating system.
• With sandbox escape achieved, the attacker reads files and credentials accessible to the browser process, including stored passwords, cookies, and session tokens.
• The attacker writes or modifies files on the host filesystem that the browser process has permission to access.
• The scope of compromise extends beyond the browser (CVSS scope is Changed), meaning impact can reach other processes or components on the same host.