CVE-2026-14431
Type Confusion in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
- Affected products
- Google Chrome, V8
- Google Chrome
- < 150.0.7871.46
- CVSS 3.1
- 8.8 HIGH
- EPSS
- 0.5% (37th percentile)
- Weakness
- CWE-843
- NVD status
- Analyzed
- Published
- 2026-07-01
CVE-2026-14431 at NVD
3 known exploits for CVE-2026-14431
Proof-of-concept code and exploit modules indexed by Sploitus