CVE-2026-14397: Out of bounds write in ANGLE in Google Chrome on Mac prior to 150

Synopsis

An out-of-bounds write vulnerability exists in the ANGLE graphics layer of Google Chrome on macOS, affecting all versions prior to 150.0.7871.46. The flaw is reachable over the network and requires no authentication, but does require the victim to visit a crafted HTML page. Successful exploitation enables a sandbox escape, giving an attacker the ability to read, modify, or destroy data and processes outside the browser sandbox. A patched-image rebuild at version 150.0.7871.46 is available on HarborGuard for environments running an affected version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker delivers the exploit over the network by directing the victim to a crafted HTML page, so the Chrome instance must be reachable through normal browser traffic.

• AuthenticationNot required

  No account, session token, or prior credential is needed; any unauthenticated remote party can serve the malicious page.

• Victim interactionRequired

  The victim must visit the attacker-controlled HTML page, meaning the attack depends on a social-engineering or malicious-link step.

• Attack complexityDetail

  Attack complexity is low, meaning the exploit is reliable and requires no specific race condition, memory layout, or environmental precondition to succeed.

Blast Radius

• Reads sensitive data from outside the browser sandbox, including files and process memory the renderer should not access.
• Writes or modifies data in privileged OS contexts beyond the browser's sandboxed process.
• Can crash or disrupt processes running outside the sandbox, affecting system stability beyond the browser tab.
• Achieves full sandbox escape, enabling execution of attacker-controlled code at a privilege level above the Chrome renderer process.