CVE-2026-14385 is a heap buffer overflow vulnerability in the ANGLE graphics engine used by Google Chrome on Mac platforms. Versions prior to 150.0.7871.46 are affected. The flaw enables remote attackers to trigger out-of-bounds memory access through a specially crafted HTML page, potentially leading to arbitrary code execution or browser compromise. The vulnerability carries a CVSS 3.1 base score of 8.8, indicating high severity with network attack vector, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability. The vendor has published an advisory linked to a stable channel update addressing this issue.

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service by exploiting the heap buffer overflow in the ANGLE component. This impacts the confidentiality, integrity, and availability of the affected system running Google Chrome on Mac prior to version 150.0.7871.46.

A fix is available in Google Chrome version 150.0.7871.46. Users and administrators should update affected Chrome installations on Mac systems to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for detailed update instructions.