CVE-2026-14392: Out of bounds write in Tint in Google Chrome prior to 150

Synopsis

An out-of-bounds write vulnerability exists in Tint, the shader compilation component of Google Chrome prior to version 150.0.7871.46. The flaw is reachable over the network without any authentication, but requires a victim to visit a crafted HTML page. Successful exploitation gives a remote attacker the ability to escape Chrome's sandbox, enabling full read, write, and availability impact on the underlying host. A patched-image rebuild at version 150.0.7871.46 is available on HarborGuard for environments running an affected version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker delivers the exploit over the network by serving a crafted HTML page, so the victim's browser must be able to reach the attacker-controlled origin.

• AuthenticationNot required

  No account or credential is needed on the targeted system; any unauthenticated remote attacker can attempt the exploit.

• Victim interactionRequired

  The victim must navigate to or be social-engineered into opening a crafted HTML page in an affected version of Chrome.

• Attack complexityDetail

  Attack complexity is low, meaning the exploit is reliable and requires no specific race condition, memory-layout dependency, or other environmental prerequisite beyond victim interaction.

Blast Radius

• Attacker escapes Chrome's renderer sandbox, gaining code execution outside the browser's isolation boundary.
• Attacker reads arbitrary files, credentials, and session material accessible to the OS user running Chrome.
• Attacker writes or modifies files and data on the host, including persistent storage and configuration.
• Attacker can crash or destabilize the host process or dependent services, disrupting availability.