CVE-2026-14093 is a use-after-free vulnerability in the Cast feature of Google Chrome before version 150.0.7871.47. An attacker who has already compromised the renderer process could exploit this flaw to perform a sandbox escape, which could lead to full compromise of the host system. The vulnerability has a CVSS 3.1 base score of 9.6, indicating critical severity with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. The vulnerability is tracked under CWE-416 (Use After Free).

Successful exploitation allows a remote attacker with control over the renderer process to escape the Chrome sandbox, potentially leading to full system compromise including confidentiality, integrity, and availability impacts.

Google has released Chrome version 150.0.7871.47 to address this vulnerability. Users and administrators should update to this version or later to mitigate the risk. Patch status is confirmed by the vendor advisory. No additional mitigations are specified.