What is the CVSS score of CVE-2026-14398?

CVE-2026-14398 has a CVSS 3.1 base score of 9.6 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Google Chrome are affected by CVE-2026-14398?

Google Chrome versions prior to 150.0.7871.46 contain a critical sandbox escape vulnerability in the ANGLE graphics layer that allows remote code execution when users visit malicious websites.. A patch is available.

How to fix or mitigate CVE-2026-14398?

Within 24 hours: Inventory all Chrome deployments and identify systems running versions prior to 150.0.7871.46. Within 7 days: Deploy Chrome version 150.0.7871.46 or later organization-wide through your standard patch management process, prioritizing systems with high-sensitivity work and internet-facing roles. Within 30 days: Verify patch completion across all endpoints through telemetry and audit logs to confirm no systems remain unpatched.

Google Chrome CVE-2026-14398

EUVD-2026-41196 CRITICAL

Use After Free (CWE-416)

2026-07-01 Chrome

GHSA-jcwp-jr96-x94x

Memory Corruption Denial Of Service Use After Free Google Suse

9.6

CVSS 3.1 · Vendor: Chrome

Severity by source

Vendor (Chrome) PRIMARY

9.6 CRITICAL

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

vuln.today AI

9.6 CRITICAL

Remote crafted page needs user interaction (UI:R); a use-after-free sandbox escape causes a scope change (S:C) with full memory-control impact across C/I/A.

3.1 AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

SUSE

CRITICAL

qualitative

Primary rating from Vendor (Chrome).

CVSS VectorVendor: Chrome

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 02, 2026 - 01:27 vuln.today

CVSS changed

Jul 02, 2026 - 00:22 NVD

9.6 (CRITICAL)

CVE Published

Jul 01, 2026 - 22:22 cve.org

CRITICAL 9.6

CVE Published

Jul 01, 2026 - 22:22 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

AnalysisAI

Sandbox escape in Google Chrome's ANGLE graphics layer prior to version 150.0.7871.46 lets a remote attacker break out of the renderer sandbox when a victim opens a crafted HTML page. Rated Critical by Chromium with a 9.6 CVSS score, the flaw is a use-after-free (CWE-416) requiring only that the target visit a malicious site. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Lure victim to malicious HTML page

Delivery

Page triggers WebGL/ANGLE processing

Exploit

Trigger use-after-free in ANGLE

Execution

Corrupt heap and hijack execution

Impact

Escape renderer sandbox to host context

Access

Lure victim to malicious HTML page

Delivery

Page triggers WebGL/ANGLE processing

Exploit

Trigger use-after-free in ANGLE

Execution

Corrupt heap and hijack execution

Impact

Escape renderer sandbox to host context

Vulnerability AssessmentAI

Exploitation	Exploitation requires the victim to open an attacker-controlled crafted HTML page in a vulnerable Chrome build (before 150.0.7871.46), so user interaction is mandatory (UI:R) - there is no zero-click path. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	Signals conflict in an important way. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker hosts a malicious web page containing crafted content that triggers the use-after-free in ANGLE, then lures a victim running an unpatched Chrome to visit it (e.g., via phishing or a malvertising redirect). When the page renders, the freed-then-reused memory is manipulated to corrupt the graphics context and escape the renderer sandbox, giving the attacker execution at a higher privilege level on the host. …
Remediation	Vendor-released patch: 150.0.7871.46 - upgrade Google Chrome to 150.0.7871.46 or later on all desktop platforms and relaunch the browser to apply the update (Chrome auto-updates but requires a restart to complete). … Detailed patch versions, workarounds, and compensating controls in full report.