CVE-2026-14389 is an integer overflow vulnerability in the Skia graphics library used by Google Chrome. It affects versions prior to 150.0.7871.46. Exploitation requires prior compromise of the renderer process and could enable sandbox escape through a specially crafted HTML page. The vulnerability is rated high severity with a CVSS 3.1 score of 8.3, indicating network attack vector, high complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. The vendor has released Chrome version 150.0.7871.46 to address this issue.

Successful exploitation could allow an attacker with control over the renderer process to escape the Chrome sandbox, potentially leading to further system compromise. The vulnerability impacts confidentiality, integrity, and availability of the affected system. However, exploitation requires initial compromise of the renderer process and user interaction.

Users and administrators should update Google Chrome to version 150.0.7871.46 or later, where this vulnerability is fixed. No additional mitigation is indicated by the vendor advisory. Patch status is confirmed by the vendor's stable channel update announcement.