Is CVE-2026-14406 being exploited?

No public exploit is currently tracked.

Back

CVE-2026-14406

Description

Out of bounds read in V8 in Google Chrome prior to 150.0.7871.46 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. (Chromium security severity: Medium)