CVE-2026-14145

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Low...

CVE-2026-11186

Google Chrome and Microsoft Edge browsers are vulnerable to a Cross-User Scripting (UXSS) flaw due to an inappropriate CSS implementation . This security issue allows a remote attacker to inject arbitrary scripts or HTML, potentially leading to the access of confidential data and compromising dat...