cve 2026 14409

The cve 2026 14409 tag tracks guidance for a security flaw in Google Chrome’s V8 implementation. The issue affects Chrome versions before 150.0.7871.46 and may allow arbitrary code execution inside the browser sandbox after a user performs specific interface gestures on crafted HTML. Coverage focuses on Windows users and administrators, including updating Chrome through an approved process, restarting the browser when required, and confirming the full installed version is 150.0.7871.46 or later. The source also notes differing severity assessments: Chromium rates the issue Low, while a CISA Authorized Data Publisher assessment gives it a CVSS 3.1 score of 7.5, rated High.