CVE-2026-14025
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk23th percentile — higher than 23% of all known CVEs
Summary
A Use-After-Free vulnerability in the Views component of Google Chrome on Mac prior to version 150.0.7871.47 allowed a remote attacker, after convincing a user to perform specific UI gestures, to potentially exploit heap corruption via a crafted HTML page. The issue is rated as Low severity by Chromium.
Risk Assessment
The risk for the organization involves potential remote code execution or browser destabilization, which could lead to data leakage or disruption of user activities on Google Chrome for Mac.
Recommendation
It is recommended to immediately update Google Chrome on all Mac systems to version 150.0.7871.47 or later to mitigate the vulnerability.
Original NVD description (English source)
Use after free in Views in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low)