VulnerabilityAnalyzed
CVE-2026-14048
Use after free in Chromecast in Google Chrome prior to 150.0.7871.47 allowed an attacker on the local network segment to obtain potentially sensitive information from process memory via a malicious peripheral.
MEDIUM 6.5EPSS 0.16%
Does this matter?
Lower severity and a low EPSS score (0.16%). Track it; it rarely justifies an emergency change on its own.
Description
Use after free in Chromecast in Google Chrome prior to 150.0.7871.47 allowed an attacker on the local network segment to obtain potentially sensitive information from process memory via a malicious peripheral. (Chromium security severity: Low)
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.16% probability · 5th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-416
- Affected
- google/chrome
- Source
- chrome-cve-admin@google.com
References
- https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.htmlVendor Advisory
- https://issues.chromium.org/issues/499189601Permissions Required
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.