CVE-2026-14395 is an out of bounds write vulnerability in the V8 JavaScript engine used by Google Chrome. It affects versions prior to 150.0.7871.46 and allows remote code execution inside the sandbox through a crafted HTML page. The vulnerability has been assigned a low severity rating by the Chromium security team. The issue is publicly disclosed and fixed in Chrome version 150.0.7871.46. No known exploits in the wild have been reported. The vendor advisory is available at the official Chrome Releases blog.

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code within the sandboxed environment of the Chrome browser. However, the impact is limited by the sandbox containment and the vulnerability is rated as low severity by the vendor. There are no reports of active exploitation in the wild.

Users should update Google Chrome to version 150.0.7871.46 or later, where this vulnerability has been fixed. Since this is a client-side vulnerability, applying the official update is the recommended and effective mitigation. No additional vendor advisories indicate alternative mitigations or that no action is required.