CVE Catalog
CVE-2026-14006
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk0.30%
22th percentile — higher than 22% of all known CVEs
Summary
A use-after-free vulnerability in the Navigation component of Google Chrome prior to 150.0.7871.47 allows a remote attacker to execute arbitrary code via a crafted HTML page.
Risk Assessment
An attacker could gain control of the victim's browser, potentially leading to data theft, malware installation, or further attacks on the organization's infrastructure.
Recommendation
Immediately update Google Chrome to version 150.0.7871.47 or later. Inform users about the need to update.
Original NVD description (English source)
Use after free in Navigation in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Medium)