CVE-2026-14432

HighCVSS 8.8

Published: 01/07/2026(UTC)Updated: 03/07/2026(UTC)Translated: 04/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

16th percentile — higher than 16% of all known CVEs

Summary

A use-after-free vulnerability was found in the V8 engine of Google Chrome prior to version 150.0.7871.46. A remote attacker can exploit a crafted HTML page to execute arbitrary code within the sandbox environment.

Risk Assessment

The risk involves potential remote code execution within the sandbox, which could lead to data compromise or further privilege escalation.

Recommendation

It is recommended to immediately update Google Chrome to version 150.0.7871.46 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)