CVE-2026-14432

Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

Published: 2026-07-01 Last update: 2026-07-01 Assigner: [email protected] Source: [email protected]

Conclusion & alert: CVE-2026-14432 is rated Risk Under Review. Mandatory action: Scoring and exploitation signals are still pending—keep following this page for CVSS or EPSS updates, then reassess remediation priority once scores appear.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2026-14432

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

EPSS has not published a score for this CVE yet—common while NVD analysis or FIRST scoring is still pending. Monitor daily updates and reassess once scores appear.

Common vulnerability scoring system (CVSS) metrics for CVE-2026-14432

CVSS metrics for this CVE.

No CVSS data in dataset for this CVE.

Weakness enumeration for CVE-2026-14432

GitHub Security Advisory for CVE-2026-14432

GHSA-x56g-fv8q-3mv6 · Severity: high — Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute...

Affected software / configurations for CVE-2026-14432

Vendor Product Version Raw CPE
No affected products in dataset.

References for CVE-2026-14432

cvelogic Threat Intelligence