Description
Insufficient policy enforcement in Sandbox in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)
Published: 2026-06-30
Score: n/a
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is insufficient policy enforcement in the Chrome sandbox on macOS. An renderer process could craft an HTML page to escape the sandbox, enabling arbitrary code execution or privilege escalation. The weakness is a sandbox escape that may expose local resources.

Affected Systems

Google Chrome browsers for macOS running versions older than 150.0.7871.47 are impacted; newer releases contain the fix.

Risk and Exploitability

EPSS data is not available. The risk is limited to situations where an attacker has already gained renderer process compromise; no direct remote exploitation is indicated. The vulnerability is not listed in CISA's KEV catalog, indicating no known large-scale exploitation yet.

Generated by OpenCVE AI on July 1, 2026 at 15:27 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update Google Chrome to version 150 or newer
  • Ensure Chrome auto‑updates are enabled or run the updater manually
  • Limit exposure by trusted web content and monitor for suspicious activity

Generated by OpenCVE AI on July 1, 2026 at 15:27 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 01 Jul 2026 15:45:00 +0000

Type Values Removed Values Added
Title Sandbox Escape via Crafted HTML on macOS Chrome when Renderer Compromised
Weaknesses CWE-272
CWE-284

Wed, 01 Jul 2026 11:45:00 +0000

Type Values Removed Values Added
Title Chrome Mac Renderer Sandbox Escape via Crafted HTML
Weaknesses CWE-284

Wed, 01 Jul 2026 10:45:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Wed, 01 Jul 2026 04:00:00 +0000

Type Values Removed Values Added
Title Chrome Mac Renderer Sandbox Escape via Crafted HTML
Weaknesses CWE-284

Tue, 30 Jun 2026 23:15:00 +0000

Type Values Removed Values Added
Description Insufficient policy enforcement in Sandbox in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)
References

Subscriptions

Google Chrome
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-07-01T15:42:32.625Z

Reserved: 2026-06-29T23:11:42.363Z

Link: CVE-2026-14101

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-01T15:30:18Z

Weaknesses