CVE-2026-14108 is a use-after-free vulnerability in the PDFium library used by Google Chrome. It affects versions of Chrome before 150.0.7871.47. Exploitation requires a user to open a crafted PDF file, which can lead to arbitrary code execution within the browser's sandbox environment. The vulnerability is rated high severity with a CVSS 3.1 score of 8.8, indicating network attack vector, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability. Google published a stable channel update that includes a fix for this vulnerability.

Successful exploitation of this vulnerability allows a remote attacker to execute arbitrary code inside the sandbox of the affected Chrome browser. This can lead to full compromise of the browser process, potentially exposing sensitive information or enabling further attacks. The impact is rated high due to the ability to execute code remotely with no privileges required.

A fix is available in Google Chrome version 150.0.7871.47. Users and administrators should update to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for details.