CVE-2026-14387 is an integer overflow vulnerability in the Skia graphics library used by Google Chrome versions before 150.0.7871.46. Exploitation of this flaw could enable a remote attacker to perform a sandbox escape via a crafted HTML page, potentially increasing the attacker's privileges beyond the browser sandbox. The vulnerability is classified as medium severity by Chromium security. There is no CVSS score available, and no public evidence of exploitation in the wild has been reported. The vendor advisory linked corresponds to a stable channel update that presumably addresses this issue.

Successful exploitation could allow a remote attacker to escape the Chrome sandbox, potentially leading to increased privileges on the host system. This could facilitate further attacks or compromise of the affected system. However, no known exploits in the wild have been reported, and the severity is assessed as medium.

A fix is available in Google Chrome version 150.0.7871.46. Users and administrators should update to this version or later to remediate the vulnerability. Since this is not a cloud service, patching the client software is required. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for detailed update instructions.