CVE-2026-7914 is a type confusion vulnerability in the Accessibility feature of Google Chrome on Windows platforms prior to version 148.0.7778.96. It allows a remote attacker, who has already compromised the renderer process, to potentially perform a sandbox escape by leveraging crafted HTML content. This vulnerability is rated high severity with a CVSS 3.1 score of 8.3, reflecting its potential to impact confidentiality, integrity, and availability. The vulnerability was publicly disclosed on May 6, 2026, and Google has released a stable channel update around that time. However, the input data does not explicitly confirm that the update fully patches this issue.

Successful exploitation of this vulnerability could allow an attacker with control over the renderer process to escape the Chrome sandbox, potentially leading to elevated privileges on the host system. This could compromise system confidentiality, integrity, and availability. No known exploits in the wild have been reported, which may reduce immediate risk but does not eliminate the threat.

The vendor has released a stable channel update for Chrome around the time of disclosure. Users should update to version 148.0.7778.96 or later to mitigate this vulnerability. Patch status is not explicitly confirmed in the provided advisory, so users should verify the update details on the official Google Chrome Releases blog to ensure the fix is applied.