Speech Component Access Protected Information

The vulnerability in the Speech component of Google Chrome and Microsoft Edge web browsers is related to access control flaws. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Speech Component Compromise Protected Information

The vulnerability in the Speech component of Google Chrome and Microsoft Edge web browsers is related to the implementation of client-side security features. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially...

Speech Component Access Protected Information

The vulnerability in the Speech component of Google Chrome and Microsoft Edge web browsers is related to the use of a name with an incorrect reference. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

ROS-20260910-73-0067

The vulnerability of the Speech component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to manipulate data integrity through a specially crafted HTML page...

ROS-20260909-73-0162

The vulnerability of the Speech component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a specially created HTML page...

Speech Component Access Tampering

The vulnerability in the Speech component of Google Chrome and Microsoft Edge web browsers is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data and compromise its integrity by using a specially crafted HTML pa...

Speech Component Data Compromise

The vulnerability in the Speech component of Google Chrome and Microsoft Edge web browsers is related to a flaw in the source verification mechanism. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...

CVE-2026-79103

A flaw was found in Google Chrome's Speech component. This vulnerability involves incorrect reference resolution, which a remote attacker can exploit to bypass site isolation. The attacker needs to have compromised the renderer process and then trick a user into visiting a specially crafted HTML...

CVE-2026-79103

Incorrect reference resolution in Speech in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79103

The Google Chrome browser (prior to version 152.0.7977.65 ) is affected by an incorrect reference resolution in the Speech component. This vulnerability allows a remote attacker who has already compromised the renderer process to bypass site isolation using a crafted HTML page. Impact includes po...

CVE-2026-18004

An insufficient policy enforcement flaw was found in the Speech component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=522280805...

CVE-2026-17985

An insufficient policy enforcement flaw was found in the Speech component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519981430...

CVE-2026-17816

An inappropriate implementation flaw was found in the Speech component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517429672...

CVE-2026-17985

Insufficient policy enforcement in Speech in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14150

An insufficient validation of untrusted input flaw was found in the Speech component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517376041...

CVE-2026-13856

An insufficient validation of untrusted input flaw was found in the Speech component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=508092634...

CVE-2026-14105

An insufficient policy enforcement flaw was found in the Speech component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513528117...

ROS-20260721-73-0017

The vulnerability of the Speech component in Google Chrome and Microsoft Edge is related to synchronization errors when using a common resource “Race Situation”. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created HT...

ROS-20260720-73-0069

The vulnerability of the Speech component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks remotely...

Chromium: CVE-2026-14150 Insufficient validation of untrusted input in Speech

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...