CVE-2026-14384
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk18th percentile — higher than 18% of all known CVEs
Summary
An out-of-bounds read vulnerability in the ANGLE component of Google Chrome on Windows prior to version 150.0.7871.46 allows a remote attacker to leak cross-origin data via a crafted HTML page.
Risk Assessment
The organization faces the risk of sensitive data leakage across different origins, potentially leading to theft of authentication credentials or other confidential information from users running Chrome on Windows.
Recommendation
Immediately update Google Chrome to version 150.0.7871.46 or later on all Windows systems within the organization.
Original NVD description (English source)
Out of bounds read in ANGLE in Google Chrome on Windows prior to 150.0.7871.46 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)