CVE-2026-14078

HighCVSS 8.8

Published: 30/06/2026(UTC)Updated: 02/07/2026(UTC)Translated: 03/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

17th percentile — higher than 17% of all known CVEs

Summary

Insufficient validation of untrusted input in WebRTC in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page.

Risk Assessment

An attacker could exploit this vulnerability to gain elevated privileges within the browser, potentially compromising user data confidentiality or integrity.

Recommendation

Immediately update Google Chrome to version 150.0.7871.47 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

Insufficient validation of untrusted input in WebRTC in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Low)