CVE-2026-14427 is a heap buffer overflow vulnerability in the Skia graphics library used by Google Chrome versions before 150.0.7871.46. The flaw allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This could lead to full compromise of the affected system. The vulnerability has a CVSS 3.1 base score of 8.3, indicating high severity. The vendor advisory linked references a stable channel update but does not explicitly state if the issue is fixed in that release or provide remediation instructions.

Successful exploitation could allow an attacker with control over the renderer process to escape the Chrome sandbox, potentially gaining elevated privileges on the host system. This could lead to complete system compromise, including confidentiality, integrity, and availability impacts.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until confirmation of a fix, users should apply the latest Chrome updates promptly and avoid untrusted content that could trigger the vulnerability.