CVE Catalog
CVE-2026-14396
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.25%
16th percentile — higher than 16% of all known CVEs
Summary
An out-of-bounds read vulnerability in the ANGLE component of Google Chrome prior to version 150.0.7871.46 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
Risk Assessment
An attacker could exploit this vulnerability to steal sensitive data from other origins, such as session tokens or personal information, posing a significant threat to user privacy and organizational security.
Recommendation
Immediately update Google Chrome to version 150.0.7871.46 or later to remediate the vulnerability in the ANGLE component.
Original NVD description (English source)
Out of bounds read in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)