CVE Catalog

CVE-2026-14416

CriticalCVSS 9.6
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.24%

15th percentile — higher than 15% of all known CVEs

Summary

An out-of-bounds read vulnerability in the Dawn component of Google Chrome prior to version 150.0.7871.46 could allow a remote attacker to potentially escape the sandbox via a crafted HTML page.

Risk Assessment

An attacker could exploit this vulnerability to execute code outside the browser's sandbox, increasing the risk of system compromise.

Recommendation

Immediately update Google Chrome to version 150.0.7871.46 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

Out of bounds read in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS