CVE-2026-14406
Medium · 5.9CVSS
5.9
EPSS
0.2%
Published
Jul 1, 2026
CISA due date
—
The record
Out of bounds read in V8 in Google Chrome prior to 150.0.7871.46 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. (Chromium security severity: Medium)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| openSUSE:Tumbleweed | chromium | 0 | 150.0.7871.46-1.1 |
Related vulnerabilities
- CVE-2026-14425 Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker… Also affects chromium
- CVE-2026-14427 Heap buffer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote… Also affects chromium
- CVE-2026-14430 Integer overflow in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker… Also affects chromium
- CVE-2026-14431 Type Confusion in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to… Also affects chromium
- CVE-2026-14432 Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to… Also affects chromium
- CVE-2026-14426 Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker… Also affects chromium
- CVE-2026-14428 Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to… Also affects chromium
- CVE-2026-14429 Insufficient validation of untrusted input in Skia in Google Chrome prior to… Also affects chromium