PT-2026-54698 · Google · Google Chrome+1

Amyb · Published 2026-07-01 · Updated 2026-07-04 · CVE-2026-14431

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.46

Description A type confusion issue exists in the V8 JavaScript engine, which can be triggered via a crafted HTML page. This flaw allows a remote attacker to execute arbitrary code within a sandbox. The issue stems from a Just-In-Time (JIT) compilation bug where sloppy mode breaks JIT assumptions.

Recommendations Update Google Chrome to version 150.0.7871.46 or later.

Fix

RCE

Type Confusion

Weakness Enumeration

CWE-843

Related Identifiers

CVE-2026-14431

Affected Products

Google Chrome

V8

References · 6

• https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-14431 · Security Note
• https://twitter.com/DFIR_Lab/status/2073201451308908944 · Twitter Post
• https://twitter.com/itszn13/status/2072460232392049004 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2072503960296947904 · Twitter Post
• https://issues.chromium.org/issues/523884658 · Note