PT-2026-54673

CVE-2026-14406

Published

2026-05-15

Updated

2026-10-25

Description by

CVSS 3.1

5.9

Medium

MetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.46

Description An out of bounds read exists in V8, the open-source high-performance JavaScript and WebAssembly engine. This issue allows an attacker to obtain potentially sensitive information from process memory if a user is convinced to install a crafted malicious Chrome Extension.

Recommendations Update Google Chrome to version 150.0.7871.46 or later.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-125: Out-of-bounds Read

Related identifiers

CVE-2026-14406

BDU:2026-13587

ECHO-B79B-238F-59E7