CVE-2026-14388
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk14th percentile — higher than 14% of all known CVEs
Summary
An out-of-bounds read vulnerability in the ANGLE component of Google Chrome prior to version 150.0.7871.46 allows a remote attacker to read potentially sensitive information from process memory via a crafted HTML page.
Risk Assessment
An attacker could access data stored in process memory, potentially leading to the disclosure of sensitive organizational information such as credentials or encryption keys.
Recommendation
Immediately update Google Chrome to version 150.0.7871.46 or later, which includes a fix for this vulnerability.
Original NVD description (English source)
Out of bounds read in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)