Exploitation ongoing with high activity in latest observed window (5 mentions)
Recommended action window: Immediate (within 24h)
NVD description
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Priority
HIGH
Exploitation
ACTIVE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-07-02 | 1 | Patch1 |
| 2026-07-08 | 2 | PoC2 |
| 2026-08-19 | 5 | Active Exploitation1PoC4 |
woah (CVE-2026-14382)[250k$][492218546][ANGLE] https://chromium-review.googlesource.com/c/angle/angle/+/7864196
Post summary
The post references CVE‑2026‑14382 and links to a Chromium review that likely contains the patch, but provides no other technical or exploitation details.
A PoC/exploit has been discovered for vulnerability CVE-2026-14382 PT ID: PT-2026-54649 Vendor: Google Product: Chrome Description: Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. References: • https://dbugs.ptsecurity.com/vulnerability/PT-2026-54649 • https://github.com/jaf0rk/CVE-2026-14382 #dbugs_vuln
Post summary
A PoC and exploit code for CVE‑2026‑14382 have been published; the vulnerability allows a sandbox escape in Chrome via a crafted HTML page, but no active exploitation has been reported.
07:54 UTC: Thread live on @lyrie_ai. 0day Intel: A PoC/exploit has been discovered for vulnerability CVE-2026-14382
Post summary
A Proof of Concept/exploit for CVE-2026-14382 has been announced, but no details on exploitation methods, active attacks, patches, or technical specifics are provided.
10:40 UTC: First exploit attempt in the wild. 0day Intel: A PoC/exploit has been discovered for vulnerability CVE-2026-14382
Post summary
The text reports an initial in-the-wild exploitation attempt for CVE-2026-14382, with a PoC/exploit discovered.
07:51 UTC: GPT-5 enrichment complete. 69 words. 1 citations. 0day Intel: A PoC/exploit has been discovered for vulnerability CVE-2026-14382
Post summary
The tweet announces that a proof‑of‑concept exploit has been discovered for CVE‑2026‑14382, but offers no further technical or patch details.
07:40 UTC: CVE-2026-14382 disclosed. A PoC/exploit has been discovered for vulnerability CVE-2026-14382 PT ID: PT-2026-54649 Vendor: Google Product: Chrome
Post summary
A PoC/exploit for CVE-2026-14382 was disclosed, confirming proof of concept development but lacking detailed code, patch, or active exploitation information.
07:43 UTC: Lyrie Sentinel flagged it. 0day Intel: A PoC/exploit has been discovered for vulnerability CVE-2026-14382
Post summary
0day Intel reports a PoC/exploit discovery for CVE-2026-14382, but provides no additional context on exploitation, patching, or technical specifics.
🚨 CVE-2026-14382: A PoC has been released for a Google Chrome vulnerability that could allow a sandbox escape via a crafted HTML page. The issue affects versions prior to 150.0.7871.46. 🔗 https://github.com/jaf0rk/CVE-2026-14382 #CyberSecurity #CVE #Chrome #ThreatWire
Post summary
A proof‑of‑concept exploit for CVE‑2026‑14382 has been published, detailing a sandbox escape via a crafted HTML page, but no evidence of in‑the‑wild exploitation or patches is mentioned.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | chrome | - | - | - |