Description
Use after free in Dawn in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Published: 2026-07-01
Score: 9.6 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A use‑after‑free defect in the Dawn rendering engine of Google Chrome on macOS predates version 150.0.7871.46. The flaw lets a remote attacker deliver a crafted HTML page that can trigger a memory corruption, resulting in a sandbox escape. If an attacker gains escape, they could execute code with the privileges of the logged‑in user, compromising confidentiality, integrity, and potentially availability of the entire system.

Affected Systems

All users running Google Chrome on macOS with versions earlier than 150.0.7871.46 are affected.

Risk and Exploitability

The advisory rates the vulnerability as high‑severity with a CVSS score of 9.6. The EPSS score is below 1 %, indicating a very low likelihood of exploitation at this time. It is not listed in the CISA KEV catalog. The attack would require a browser rendering a crafted HTML page, typically via a malicious website or local file, and relies on a use‑after‑free bug. No known exploit is currently publicly available, but the potential impact justifies immediate patching.

Generated by OpenCVE AI on July 15, 2026 at 20:58 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update Chrome to version 150.0.7871.46 or later on macOS.
  • Until the update is installed, avoid opening untrusted or locally hosted HTML files and refrain from visiting unfamiliar web pages.
  • Verify that Chrome’s sandboxing and Site Isolation features remain enabled in the browser settings to provide additional containment for rendering processes.

Generated by OpenCVE AI on July 15, 2026 at 20:58 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-4672-1 chromium security update
Debian DSA Debian DSA DSA-6378-1 chromium security update
History

Wed, 15 Jul 2026 21:15:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in Chrome Dawn Rendering Engine Enables Sandbox Escape on macOS

Tue, 14 Jul 2026 18:15:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in Chrome Dawn Rendering Engine Enables Sandbox Escape on macOS

Mon, 13 Jul 2026 03:30:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in Chrome Dawn Rendering Engine Enables Sandbox Escape on macOS

Sun, 12 Jul 2026 01:15:00 +0000

Type Values Removed Values Added
Title Use-after-free in Chrome Dawn Renderer Enables Sandbox Escape on macOS

Fri, 10 Jul 2026 11:00:00 +0000

Type Values Removed Values Added
Title Use-after-free in Chrome Dawn Renderer Enables Sandbox Escape on macOS

Fri, 10 Jul 2026 03:30:00 +0000

Type Values Removed Values Added
Title Use after free flaw enables sandbox escape in Google Chrome on macOS

Thu, 09 Jul 2026 06:00:00 +0000

Type Values Removed Values Added
Title Use after free flaw enables sandbox escape in Google Chrome on macOS

Wed, 08 Jul 2026 13:15:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in Dawn Rendering Engine Enables Sandbox Escape on macOS

Wed, 08 Jul 2026 01:45:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in Dawn Rendering Engine Enables Sandbox Escape on macOS

Tue, 07 Jul 2026 09:00:00 +0000

Type Values Removed Values Added
Title Use-After-Free in Chrome Dawn Leads to Potential Sandbox Escape

Mon, 06 Jul 2026 14:30:00 +0000

Type Values Removed Values Added
Title Use-After-Free in Chrome Dawn Leads to Potential Sandbox Escape

Mon, 06 Jul 2026 02:45:00 +0000

Type Values Removed Values Added
Title Use-After‑Free Leads to Sandbox Escape in Chrome for macOS

Sun, 05 Jul 2026 13:00:00 +0000

Type Values Removed Values Added
Title Use-After‑Free Leads to Sandbox Escape in Chrome for macOS

Sun, 05 Jul 2026 03:00:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in Chrome Dawn Leading to Sandbox Escape on macOS

Sat, 04 Jul 2026 10:45:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in Chrome Dawn Leading to Sandbox Escape on macOS

Fri, 03 Jul 2026 22:15:00 +0000

Type Values Removed Values Added
Title Use-After-Free in Chrome's Dawn Engine Enables Sandbox Escape on macOS

Fri, 03 Jul 2026 07:30:00 +0000

Type Values Removed Values Added
Title Use-After-Free in Chrome's Dawn Engine Enables Sandbox Escape on macOS

Fri, 03 Jul 2026 00:45:00 +0000

Type Values Removed Values Added
Title Use-After-Free in Chrome Dawn Enables Sandbox Escape on macOS

Thu, 02 Jul 2026 21:00:00 +0000

Type Values Removed Values Added
Title Use-After-Free in Chrome Dawn Enables Sandbox Escape on macOS

Thu, 02 Jul 2026 10:00:00 +0000

Type Values Removed Values Added
Title Use After Free in Chrome Dawn Allows Sandbox Escape on Mac

Thu, 02 Jul 2026 05:30:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Thu, 02 Jul 2026 03:00:00 +0000

Type Values Removed Values Added
Title Use After Free in Chrome Dawn Allows Sandbox Escape on Mac

Thu, 02 Jul 2026 00:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 9.6, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 01 Jul 2026 22:45:00 +0000

Type Values Removed Values Added
Description Use after free in Dawn in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Weaknesses CWE-416
References

Subscriptions

Google Chrome
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-07-03T03:55:20.490Z

Reserved: 2026-07-01T21:37:34.040Z

Link: CVE-2026-14424

cve-icon Vulnrichment

Updated: 2026-07-02T00:00:57.672Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-15T21:00:05Z

Weaknesses