CVE-2026-6921
High · 8.3CVSS
8.3
EPSS
0.2%
Published
Apr 23, 2026
CISA due date
—
The record
Race in GPU in Google Chrome on Windows prior to 147.0.7727.117 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium security severity: Medium)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| openSUSE:Tumbleweed | chromium | 0 | 148.0.7778.56-1.1 |
Related vulnerabilities
- CVE-2026-14137 Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS… Also affects chromium
- CVE-2026-14140 Insufficient validation of untrusted input in Input in Google Chrome on Android prior to… Also affects chromium
- CVE-2026-14141 Incorrect security UI in Document Picture-in-Picture in Google Chrome on Android prior to… Also affects chromium
- CVE-2026-14126 Incorrect security UI in UI in Google Chrome on Android prior to 150.0.7871.47 allowed a… Also affects chromium
- CVE-2026-14124 Inappropriate implementation in CredentialProvider in Google Chrome on Windows prior to… Also affects chromium
- CVE-2026-14134 Inappropriate implementation in Autofill in Google Chrome on Android prior to… Also affects chromium
- CVE-2026-14114 Inappropriate implementation in WebAppInstalls in Google Chrome on Android prior to… Also affects chromium
- CVE-2026-14080 Insufficient validation of untrusted input in TabSwitcher in Google Chrome on Android… Also affects chromium