CVE-2026-14109: Mojo Policy Gap in Chrome Before 150.0.7871.47
CVE-2026-14109 is an insufficient policy enforcement bug in Mojo in Chrome before 150.0.7871.47 that could aid a sandbox escape. Update Chrome now.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
CVE-2026-14109 is an insufficient policy enforcement bug in Mojo in Chrome before 150.0.7871.47 that could aid a sandbox escape. Update Chrome now.
CVE-2026-14106 is an input validation flaw in Text in Chrome on Android before 150.0.7871.47 that could aid a sandbox escape. Update Chrome from Play.
CVE-2026-14104 is an input validation flaw in Chrome WebAppInstalls before 150.0.7871.47 that allows code execution inside the sandbox. Update Chrome.
CVE-2026-14101 is an insufficient policy enforcement bug in the Chrome sandbox on Mac before 150.0.7871.47. Chromium rates it Low. Update Chrome.
CVE-2026-13785 is a critical use after free in Bluetooth in Chrome on Mac before 150.0.7871.47. Update Chrome and relaunch to close it, then verify.
CVE-2026-13782 is a use after free in the Chrome browser process, scored 10.0, that could help escape the sandbox. Update to 150.0.7871.47 or later.
CVE-2026-13781 is a critical input validation flaw in Skia in Chrome before 150.0.7871.47 that could aid a sandbox escape. Update Chrome and relaunch.
CVE-2026-13780 is a critical input validation flaw in ANGLE in Chrome before 150.0.7871.47 that could aid a sandbox escape. Update Chrome and relaunch.
CVE-2026-13776 is a critical type confusion in Dawn, the WebGPU layer in Chrome before 150.0.7871.47. Update Chrome and relaunch to get the fix.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.