CVE-2026-14403

HighCVSS 8.8

Published: 01/07/2026(UTC)Updated: 03/07/2026(UTC)Translated: 04/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

17th percentile — higher than 17% of all known CVEs

Summary

A use-after-free vulnerability was found in the V8 engine of Google Chrome prior to version 150.0.7871.46. A remote attacker can exploit a crafted HTML page to execute arbitrary code inside a sandbox.

Risk Assessment

The risk for the organization is the potential for remote code execution within the sandbox environment, which could compromise user data confidentiality and integrity.

Recommendation

It is recommended to immediately update Google Chrome to version 150.0.7871.46 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)