CVE-2026-14093 is a use-after-free vulnerability in the Cast feature of Google Chrome versions before 150.0.7871.47. It permits a remote attacker with control over the renderer process to potentially perform a sandbox escape via a crafted HTML page. The vulnerability is acknowledged by Google with a low severity rating. Although a vendor advisory link is provided, it does not explicitly confirm whether a patch has been released or if mitigation steps are recommended.

If exploited, this vulnerability could allow an attacker who has already compromised the renderer process to escape the Chrome sandbox, potentially increasing the level of control over the host system. However, the severity is rated low, and no known exploits have been reported in the wild, indicating limited immediate risk.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until confirmation of a fix, users should maintain standard security practices and update Chrome promptly once an official fix is announced.