Out of Bounds Read in ANGLE of Google Chrome by Google
CVE-2026-14388

6.5MEDIUM

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
1 July 2026

What is CVE-2026-14388?

An out of bounds read vulnerability exists in the ANGLE component of Google Chrome, allowing remote attackers to potentially access sensitive information from process memory via a specially crafted HTML page. This vulnerability affects versions of Google Chrome prior to 150.0.7871.46 and emphasizes the importance of keeping software up to date to mitigate exposure to such threats.

Affected Version(s)

Chrome 150.0.7871.46

References

https://chromereleases.googleblog.com/2026/06/stable-chan...
https://issues.chromium.org/issues/500476886

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.