PT-2026-54674 · Google · V8+1

CVE-2026-14407

·

Published

2026-05-15

·

Updated

2026-08-31

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.46
Description An inappropriate implementation in the V8 engine allows a remote attacker to execute arbitrary code within a sandbox by inducing a user to visit a specially crafted HTML page. V8 is the open-source high-performance JavaScript and WebAssembly engine used in Chrome.
Recommendations Update Google Chrome to version 150.0.7871.46 or later.

Fix

DoS

Buffer Overflow

Code Injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-13588
CVE-2026-14407
ECHO-664F-4D8F-2B26
OPENSUSE-SU-2026:11184-1
OPENSUSE-SU-2026:21279-1
OPENSUSE-SU-2026:21498-1

Affected Products

Google Chrome
V8