Out of Bounds Read Vulnerability in Google Chrome
CVE-2026-14386

6.5MEDIUM

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
1 July 2026

What is CVE-2026-14386?

An out of bounds read vulnerability has been identified in the ANGLE component of Google Chrome, preceding version 150.0.7871.46. This security flaw allows remote attackers to exploit specially crafted HTML pages, potentially leading to unauthorized access to sensitive data within the process memory. Users are encouraged to ensure they are on the latest version of Chrome to protect against this exploit. For further details, you can refer to the official update announcement and related Chromium issue tracker.

Affected Version(s)

Chrome 150.0.7871.46

References

https://chromereleases.googleblog.com/2026/06/stable-chan...
https://issues.chromium.org/issues/499047960

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.