Skip to content
5.9 Medium

CVE-2026-14406 Out of bounds read in V8 in Google Chrome prior to 150.0.7871.46 allowed an attacker who convinced a user to install a…

Description

Out of bounds read in V8 in Google Chrome prior to 150.0.7871.46 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. (Chromium security severity: Medium)

Affected products and versions

Product Affected versions Fixed in
Chrome 150.0 earliest → < 150.0.7871.46 150.0.7871.46
The 6072 CVEs of Chrome →
Track this CVE