CVE-2026-14398: Use after free in ANGLE in Google Chrome prior to 150

Synopsis

A use-after-free vulnerability in ANGLE, the graphics-layer translation component inside Google Chrome, allows a remote attacker to exploit a dangling memory pointer by luring a victim to a crafted HTML page. No authentication is required, but the victim must visit the attacker-controlled page; the CVSS vector (AV:N/AC:L/PR:N/UI:R/S:C) reflects network reachability with changed scope, meaning the exploit can break out of Chrome's renderer sandbox. Successful exploitation gives the attacker full read, write, and execution capability across the host process, effectively a sandbox escape with high confidentiality, integrity, and availability impact. A patched-image rebuild at Chrome 150.0.7871.46 is available on HarborGuard for environments running an affected version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker delivers the exploit over the network by hosting a crafted HTML page that the victim's browser fetches remotely.

• AuthenticationNot required

  No account or credential of any kind is needed; any anonymous visitor to the malicious page is a valid target.

• Victim interactionRequired

  The victim must navigate to or be redirected to the attacker-controlled HTML page, making a social-engineering or phishing step necessary.

• Attack complexityDetail

  Attack complexity is Low, meaning the exploit is reliable and imposes no special environmental conditions, race windows, or memory-layout prerequisites on the attacker.

Blast Radius

• The attacker escapes Chrome's renderer sandbox, gaining code execution in a higher-privilege host process outside the browser's isolation boundary.
• With high confidentiality impact, the attacker reads memory and on-disk data accessible to the Chrome process, including stored credentials, cookies, and session tokens.
• With high integrity impact, the attacker writes or modifies files and process memory reachable from the escaped sandbox context.
• With high availability impact, the attacker can crash or destabilize the Chrome process or dependent host services.