CVE Catalog
CVE-2026-14394
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk0.24%
14th percentile — higher than 14% of all known CVEs
Summary
A Use-After-Free vulnerability in V8 in Google Chrome prior to 150.0.7871.46 allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Risk Assessment
The risk for the organization includes potential remote code execution or browser instability, which could lead to data leakage or service disruption.
Recommendation
It is recommended to immediately update Google Chrome to version 150.0.7871.46 or later to mitigate the vulnerability.
Original NVD description (English source)
Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low)