vulnerability context

CVE-2026-14426

CVSS 7.5 HIGHCWE-416

Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Published 2026-07-01 · last modified 2026-07-02

details

CISA KEV status: Not in catalog
CVSS v3: 7.5 / HIGH
CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE: CWE-416
OTX pulses: 0 total, 0 recent

View on NVD → · cve.org

source mentions 2

[TheHackerWire] 🟠 CVE-2026-14426 - High (7.5) Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote at...Bluesky · 1h ago
[CVE Alerts ] CVE-2026-14426 - Google Chrome Use-After-Free Vulnerability CVE ID : CVE-2026-14426 Published : July 1, 2026, 10:...Bluesky · 4h ago

source consensus

Bluesky2×

Want the 3-bullet summary of CVE-2026-14426, plus webhook alerts when KEV is updated? Pro is $10/mo.

Open in reader See Pro →