CVE-2026-14007

CVE-2026-14007 describes insufficient policy enforcement in Chrome's PermissionsPolicy, enabling a remote attacker to bypass navigation restrictions through a crafted HTML page. Affected product: Google Chrome (Chromium-based). Root cause: inadequate enforcement of PermissionsPolicy before versio...