CVE-2026-14102

HighCVSS 8.8

Published: 30/06/2026(UTC)Updated: 02/07/2026(UTC)Translated: 03/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

13th percentile — higher than 13% of all known CVEs

Summary

A use-after-free vulnerability in the Passwords component of Google Chrome prior to version 150.0.7871.47 was discovered. A remote attacker could potentially exploit heap corruption via a crafted HTML page.

Risk Assessment

The risk for the organization includes potential remote code execution or browser destabilization, which could lead to data leakage or disruption of user operations.

Recommendation

It is recommended to immediately update Google Chrome to version 150.0.7871.47 or later to mitigate this vulnerability.

Original NVD description (English source)

Use after free in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low)