External risk intelligence

ANGLE Out of Bounds Write in Chrome for Mac May Allow Sandbox Escape

CVE advisorySeverity: CRITICAL (CVSS 9.6)

CVE-2026-14397

The vulnerability exists in a web browser, which is an application primarily designed to process and render untrusted content from the public internet. Because users routinely access public web pages that trigger browser rendering engines, the attack surface is commonly exposed to internet-sourced content.

Out-of-bounds Write

Google Chrome

before 150.0.7871.46

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

External exposure likelihood

Horizon Alert

Summary of the vulnerability and why it matters

A vulnerability in Google Chrome on Mac could allow an attacker to escape the browser's security sandbox. This issue arises from an out-of-bounds write error within the ANGLE graphics engine, which, if exploited via a malicious HTML page, may lead to unauthorized access to the system. The primary concern is to verify if our environment is affected and to what extent.

Browser flaw could break security protections.
Matters if employees use Chrome on Mac.
Assess Chrome Mac usage for exposure.

Attack Path

How an attacker could exploit the issue

An attacker could exploit this vulnerability by luring a user to a malicious website. When the user visits this site, the browser's rendering engine attempts to process specially crafted code within a web page. This interaction can lead to a security bypass, allowing the attacker to break out of the browser's isolated environment.

Requires user interaction with a malicious page.
Triggered by rendering crafted HTML content.
Can lead to sandbox escape.

Live Threat

Current exploitation, exposure, and threat context

This vulnerability could allow a remote attacker to escape the browser's sandbox when a user visits a specially crafted HTML page. This could potentially lead to unauthorized access to system resources or data beyond the browser's intended limitations.

Sandbox escape.
Malicious HTML page.
System compromise.

Operational Fix

Recommended remediation, mitigation, and detection steps

This critical vulnerability affects Google Chrome on macOS, with potential for sandbox escape via crafted HTML. Teams responsible for endpoint security, browser management, and user experience should prioritize understanding their Chrome deployment. The immediate first step is to inventory all Mac endpoints, confirm exposure to untrusted HTML content, and identify the accountable owners for these devices before planning remediation.

Endpoint and browser teams own this.
Verify Mac Chrome exposure to untrusted sites.
Plan and deploy updates during maintenance.

Supplementary metadata

CVSS vector

Validate whether this threat affects your internet-facing exposure.

Halo Threat Intelligence helps prioritize remediation with Halo Surface Signal and H/A/L/O context. Start exposure validation with a free external attack surface trial.

Free EASM Trial See How Signal Works

Frequently asked questions

What is the ANGLE component in Google Chrome?

ANGLE is a graphics engine used by Chrome to translate high-level graphics calls into formats that the underlying operating system can understand. It acts as a bridge between the browser and your Mac's hardware to ensure complex visual elements, like those found in web games or 3D visualizations, render correctly.

What does an out-of-bounds write mean in CVE-2026-14397?

This is a memory safety issue classified as CWE-787. It occurs when a program tries to write data outside the designated memory space assigned to it. In this CVE, an attacker can use this flaw to overwrite adjacent memory, potentially overriding security controls that keep the browser isolated from the rest of your computer.

How is this vulnerability triggered?

The flaw is triggered when a browser processes specially crafted HTML content, typically hosted on a malicious website. Simply navigating to a site containing this code allows the attacker to reach the vulnerable engine. It is not triggered by standard web browsing or by downloading files that the browser does not actively render.

Why is this a concern for Mac users?

According to Halo Surface Signal, this vulnerability is significant because Chrome is designed to constantly render untrusted content from the public internet. Since users frequently visit diverse websites, the browser acts as a common gateway for potential threats, making it important to understand if your devices are running the affected software version.

What should I do if I use Chrome on a Mac?

Your first step is to check which version of Chrome is installed on your Mac endpoints to see if it predates 150.0.7871.46. You should confirm that your browser is set to update automatically or initiate a manual update through the browser's settings menu to ensure you receive the patch that resolves the underlying graphics engine flaw.

References

Written by Nicholas Merritt

Nicholas Merritt is VP of Security Solutions at Halo Security. With more than 25 years across application security, vulnerability prioritization, and offensive security, he helps teams translate threat data into practical exposure validation and remediation focus. He authors Halo Threat Intelligence CVE advisories using Halo Surface Signal and H/A/L/O context to prioritize internet-facing risk.