CVE-2026-14107

HighCVSS 8.8

Published: 30/06/2026(UTC)Updated: 02/07/2026(UTC)Translated: 03/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.28%

20th percentile — higher than 20% of all known CVEs

Summary

A use-after-free vulnerability in the Scheduling component of Google Chrome prior to version 150.0.7871.47 allows a remote attacker to execute arbitrary code within a sandbox via a crafted HTML page.

Risk Assessment

The risk for the organization is the potential for remote code execution, which could lead to data breaches or system compromise, despite sandbox restrictions.

Recommendation

It is recommended to immediately update Google Chrome to version 150.0.7871.47 or later to mitigate this vulnerability.

Original NVD description (English source)

Use after free in Scheduling in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)