CVE-2026-14430
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk21th percentile — higher than 21% of all known CVEs
Summary
An integer overflow in the V8 JavaScript engine in Google Chrome prior to version 150.0.7871.46 allows a remote attacker to execute arbitrary code within the sandbox by crafting a malicious HTML page.
Risk Assessment
The risk for the organization is that an attacker can remotely execute arbitrary code in the browser context, potentially compromising user data confidentiality and integrity despite sandbox restrictions.
Recommendation
It is recommended to immediately update Google Chrome to version 150.0.7871.46 or later, which includes a fix for this vulnerability.
Original NVD description (English source)
Integer overflow in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)