CVE-2026-14148

Type Confusion in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14119

Type Confusion in Bluetooth in Google Chrome on Windows prior to 150.0.7871.47 allowed an attacker on the local network segment to obtain potentially sensitive information from process memory via a malicious peripheral. Chromium security severity: Low...

CVE-2026-14119

A Type Confusion flaw exists in the Bluetooth component of Google Chrome on Windows (prior to version 150.0.7871.47 ). This vulnerability allows an attacker located on the local network segment to obtain potentially sensitive information from process memory by leveraging a malicious peripheral . ...

CVE-2026-14096

Inappropriate implementation in Input in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14089

Insufficient validation of untrusted input in PopupBlocker in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14061

Inappropriate implementation in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14062

Inappropriate implementation in Views in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. Chromium security severity: Low...

CVE-2026-14063

An out of bounds memory access flaw exists in the Chromecast component of the Google Chrome and Microsoft Edge browsers. This vulnerability allows a local attacker to obtain potentially sensitive information from process memory by sending malicious network traffic. The issue impacts versions of t...

CVE-2026-14051

Uninitialized Use in GamepadAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14022

Insufficient validation of untrusted input in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-14012

A side-channel information leakage flaw exists in the CSS component of the Chromium browser (impacting Google Chrome and Microsoft Edge ). A remote attacker can exploit this vulnerability by using a crafted HTML page to obtain potentially sensitive information from process memory. The issue is re...

CVE-2026-14002

A vulnerability exists in the Geolocation component of the Chromium browser (including Google Chrome and Microsoft Edge ) prior to version 150.0.7871.47 . Due to an inappropriate implementation, a remote attacker who has compromised the renderer process can perform UI spoofing by tricking the use...

CVE-2026-13976

A heap buffer overflow flaw exists in the Storage component of the Chromium browser (including Google Chrome and Microsoft Edge ). The vulnerability stems from insufficient data validation prior to version 150.0.7871.47, which could allow a remote attacker who has compromised the renderer process...

CVE-2026-13971

Google Chrome (versions prior to 150.0.7871.47) is vulnerable to an uninitialized use flaw in the Skia component. A remote attacker who has compromised the renderer process can exploit this by using a crafted HTML page to obtain potentially sensitive information from process memory. Security upda...

CVE-2026-13970

The Media component in the Chromium browser (including Google Chrome and Microsoft Edge ) is vulnerable to an uninitialized use flaw . This vulnerability allows a remote attacker who has already compromised the renderer process to obtain potentially sensitive information from process memory by us...

CVE-2026-13962

Insufficient data validation in PDF in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13961

Insufficient validation of untrusted input in DevTools in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security...

CVE-2026-13958

A Use of Uninitialized Variable flaw (CWE-457) exists in the Codecs component of the Google Chrome browser on Windows . This vulnerability affects versions prior to 150.0.7871.47 and allows a remote attacker to obtain potentially sensitive information from process memory by navigating to a crafte...

CVE-2026-13949

Insufficient policy enforcement in Payments in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13947

A vulnerability in the XR component of the Chromium browser (affecting Google Chrome and Microsoft Edge ) was caused by an uninitialized use flaw. A remote attacker who had compromised the renderer process could use a crafted HTML page to obtain potentially sensitive information from process memo...