CVE-2026-14418

MediumCVSS 4.3

Published: 01/07/2026(UTC)Updated: 02/07/2026(UTC)Translated: 03/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

6th percentile — higher than 6% of all known CVEs

Summary

An uninitialized use vulnerability in the ANGLE component of Google Chrome prior to 150.0.7871.46 allows a remote attacker to leak cross-origin data via a crafted HTML page. The issue is rated as High severity by Chromium security.

Risk Assessment

The risk involves potential theft of sensitive cross-origin data such as user sessions or tokens, which could compromise organizational data privacy and security.

Recommendation

Immediately update Google Chrome to version 150.0.7871.46 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)