CVE Catalog
CVE-2026-14108
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk0.26%
17th percentile — higher than 17% of all known CVEs
Summary
A use-after-free vulnerability was found in PDFium in Google Chrome prior to version 150.0.7871.47. A remote attacker could exploit a crafted PDF file to execute arbitrary code inside a sandbox.
Risk Assessment
The risk involves remote code execution within a sandbox environment, potentially leading to data compromise or further privilege escalation.
Recommendation
Immediately update Google Chrome to version 150.0.7871.47 or later, which includes a fix for this vulnerability.
Original NVD description (English source)
Use after free in PDFium in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: Low)