Back Endorlabs

CVE-2026-5915

Endorlabs • June 30, 2026

Insufficient validation of untrusted input in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Low)

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerability in Google Chrome Allows Remote Code Execution A critical vulnerability, CVE-2026-14104, was identified in Google Chrome versions prior to 150.0.7871.47. This flaw involves insufficient validation of untrusted input in WebAppInstalls, enabling remote attackers to execute arbitrary code via crafted HTML pages. The vulnerability has been assigned a CVSS score of 9.8, indicating its severity. Affected users are those running the vulnerable versions of Google Chrome. The vulnerability was confirmed by three independent sources before publication. Currently, the Chromium security severity is rated as low, suggesting that while serious, it may not be actively exploited. Users are advised to update to the latest version to mitigate risks. This incident highlights the ongoing need for vigilance in web application security. 7 sources 58

Extracted Entities

CVE-2026-5915

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (2)

MITRE ATT&CK (1)

Platforms (1)

Tools (1)