CVE Catalog
CVE-2026-14395
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk0.28%
19th percentile — higher than 19% of all known CVEs
Summary
An out-of-bounds write vulnerability in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
Risk Assessment
The risk for the organization is that a remote attacker could execute arbitrary code, potentially compromising system confidentiality, integrity, or availability, despite sandbox restrictions.
Recommendation
It is recommended to immediately update Google Chrome to version 150.0.7871.46 or later to mitigate this vulnerability.
Original NVD description (English source)
Out of bounds write in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)