CVE-2026-14416: Out of bounds read in Dawn in Google Chrome prior to 150

Synopsis

An out-of-bounds read vulnerability in Dawn, the WebGPU graphics backend used by Google Chrome, allows a remote attacker to trigger a sandbox escape through a crafted HTML page. The attack is reachable over the network, requires no authentication, but does require the victim to visit a malicious page. Successful exploitation gives the attacker full read, write, and denial-of-service capability beyond the Chrome sandbox boundary, with scope impact extending to the host. A patched-image rebuild at version 150.0.7871.46 is available on HarborGuard for environments running an affected version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker delivers the exploit over the network; the target Chrome instance must be reachable by directing the victim to an attacker-controlled or compromised web page.

• AuthenticationNot required

  No credentials or prior account access are needed; any unauthenticated remote party can serve the crafted HTML page.

• Victim interactionRequired

  The victim must navigate to or be redirected to the crafted HTML page, making social engineering or malicious ad delivery the primary delivery vector.

• Attack complexityDetail

  Attack complexity is low, meaning the exploit is reliable and does not depend on race conditions, specific memory layouts, or other variable environmental factors.

Blast Radius

• The attacker escapes the Chrome renderer sandbox, gaining code execution in a broader process context on the victim host.
• Confidentiality impact is high: the attacker reads memory and data outside the sandbox, including session tokens, cached credentials, and browser-accessible file content.
• Integrity impact is high: the attacker writes to memory or storage outside the sandbox, enabling persistent changes or injection of malicious data.
• Availability impact is high: the attacker crashes or destabilizes the affected Chrome process and potentially dependent host services.