Out of Bounds Read in Google Chrome Due to Malicious Extensions

CVE-2026-14406

What is CVE-2026-14406?

A vulnerability has been identified in Google Chrome that arises from an out-of-bounds read within the V8 engine. This flaw can be exploited by an attacker through a malicious Chrome extension, convincing the user to install it. Successful exploitation allows the attacker to read potentially sensitive information from the process memory, posing a significant risk to user privacy and data security. Users are advised to ensure they are using updated versions of Chrome to mitigate potential threats from this vulnerability.

References