Description
Use after free in Dawn in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Published: 2026-07-01
Score: 9.6 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A use-after-free defect in the Dawn rendering engine of Google Chrome on macOS allows a remote attacker to potentially escape the browser sandbox by delivering a crafted HTML page. This issue corresponds to CWE-416, use-after-free.

Affected Systems

Google Chrome on macOS versions earlier than 150.0.7871.46.

Risk and Exploitability

The CVSS score of 9.6 demonstrates high severity. The EPSS score indicates a probability of exploitation below 1 %. The vulnerability is not listed in the CISA KEV catalog. A remote attacker can trigger the flaw by having the browser render a malicious HTML page. No publicly documented exploit is mentioned.

Generated by OpenCVE AI on July 31, 2026 at 15:17 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update Chrome to version 150.0.7871.46 or later on macOS.
  • Until the update is applied, avoid opening or accessing untrusted HTML content that may trigger a sandbox escape.
  • Regularly check for and apply Chrome security updates as they become available.

Generated by OpenCVE AI on July 31, 2026 at 15:17 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-4672-1 chromium security update
Debian DSA Debian DSA DSA-6378-1 chromium security update
History

Fri, 31 Jul 2026 15:45:00 +0000

Type Values Removed Values Added
Title Use-After-Free in Chrome Dawn Allows Potential Sandbox Escape on macOS

Mon, 27 Jul 2026 01:00:00 +0000

Type Values Removed Values Added
Title Use-After-Free in Chrome Dawn Allows Potential Sandbox Escape on macOS

Fri, 24 Jul 2026 18:30:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in Chrome Dawn Rendering Engine Enables Sandbox Escape on macOS

Wed, 15 Jul 2026 21:15:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in Chrome Dawn Rendering Engine Enables Sandbox Escape on macOS

Tue, 14 Jul 2026 18:15:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in Chrome Dawn Rendering Engine Enables Sandbox Escape on macOS

Mon, 13 Jul 2026 03:30:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in Chrome Dawn Rendering Engine Enables Sandbox Escape on macOS

Sun, 12 Jul 2026 01:15:00 +0000

Type Values Removed Values Added
Title Use-after-free in Chrome Dawn Renderer Enables Sandbox Escape on macOS

Fri, 10 Jul 2026 11:00:00 +0000

Type Values Removed Values Added
Title Use-after-free in Chrome Dawn Renderer Enables Sandbox Escape on macOS

Fri, 10 Jul 2026 03:30:00 +0000

Type Values Removed Values Added
Title Use after free flaw enables sandbox escape in Google Chrome on macOS

Thu, 09 Jul 2026 06:00:00 +0000

Type Values Removed Values Added
Title Use after free flaw enables sandbox escape in Google Chrome on macOS

Wed, 08 Jul 2026 13:15:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in Dawn Rendering Engine Enables Sandbox Escape on macOS

Wed, 08 Jul 2026 01:45:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in Dawn Rendering Engine Enables Sandbox Escape on macOS

Tue, 07 Jul 2026 09:00:00 +0000

Type Values Removed Values Added
Title Use-After-Free in Chrome Dawn Leads to Potential Sandbox Escape

Mon, 06 Jul 2026 14:30:00 +0000

Type Values Removed Values Added
Title Use-After-Free in Chrome Dawn Leads to Potential Sandbox Escape

Mon, 06 Jul 2026 02:45:00 +0000

Type Values Removed Values Added
Title Use-After‑Free Leads to Sandbox Escape in Chrome for macOS

Sun, 05 Jul 2026 13:00:00 +0000

Type Values Removed Values Added
Title Use-After‑Free Leads to Sandbox Escape in Chrome for macOS

Sun, 05 Jul 2026 03:00:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in Chrome Dawn Leading to Sandbox Escape on macOS

Sat, 04 Jul 2026 10:45:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in Chrome Dawn Leading to Sandbox Escape on macOS

Fri, 03 Jul 2026 22:15:00 +0000

Type Values Removed Values Added
Title Use-After-Free in Chrome's Dawn Engine Enables Sandbox Escape on macOS

Fri, 03 Jul 2026 07:30:00 +0000

Type Values Removed Values Added
Title Use-After-Free in Chrome's Dawn Engine Enables Sandbox Escape on macOS

Fri, 03 Jul 2026 00:45:00 +0000

Type Values Removed Values Added
Title Use-After-Free in Chrome Dawn Enables Sandbox Escape on macOS

Thu, 02 Jul 2026 21:00:00 +0000

Type Values Removed Values Added
Title Use-After-Free in Chrome Dawn Enables Sandbox Escape on macOS

Thu, 02 Jul 2026 10:00:00 +0000

Type Values Removed Values Added
Title Use After Free in Chrome Dawn Allows Sandbox Escape on Mac

Thu, 02 Jul 2026 05:30:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Thu, 02 Jul 2026 03:00:00 +0000

Type Values Removed Values Added
Title Use After Free in Chrome Dawn Allows Sandbox Escape on Mac

Thu, 02 Jul 2026 00:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 9.6, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 01 Jul 2026 22:45:00 +0000

Type Values Removed Values Added
Description Use after free in Dawn in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Weaknesses CWE-416
References

Subscriptions

Apple Macos
Google Chrome
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-07-03T03:55:20.490Z

Reserved: 2026-07-01T21:37:34.040Z

Link: CVE-2026-14424

cve-icon Vulnrichment

Updated: 2026-07-02T00:00:57.672Z

cve-icon NVD

Status : Analyzed

Published: 2026-07-01T23:16:50.897

Modified: 2026-07-03T04:17:50.160

Link: CVE-2026-14424

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-31T15:30:03Z

Weaknesses