CVE-2026-14074

Side-channel information leakage in WebAuthentication in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14073

Insufficient validation of untrusted input in WebXR in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14073

A vulnerability in the WebXR component of the Chromium browser (including Google Chrome and Microsoft Edge ) is caused by insufficient validation of untrusted input . A remote attacker can exploit this flaw by using a crafted HTML page to bypass navigation restrictions and potentially compromise ...

CVE-2026-14070

Integer overflow in WebNN in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14071

Side-channel information leakage in WebAudio in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14067

Use after free in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14068

Inappropriate implementation in Omnibox in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14068

Inappropriate implementation in Omnibox in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14068

An inappropriate implementation flaw in the Omnibox component of the Chromium browser (including Google Chrome on iOS ) allows a remote attacker to inject arbitrary scripts or HTML (UXSS ) via a crafted HTML page. This vulnerability is triggered when a user is convinced to perform specific UI ges...

CVE-2026-14069

A remote attacker can exploit an integer overflow flaw in the WebNN component of the Chromium browser (including Google Chrome and Microsoft Edge ) to obtain potentially sensitive information from process memory. This vulnerability can be triggered via a crafted HTML page . The issue affects vers...

CVE-2026-14065

A vulnerability exists in the PageInfo component of the Chromium browser (including Google Chrome and Microsoft Edge ) due to insufficient validation of untrusted input. An attacker who has compromised the renderer process can exploit this flaw via a crafted HTML page to bypass navigation restric...

CVE-2026-14066

A vulnerability in Chrome for iOS (specifically in the Chromium component) allows a remote attacker to bypass navigation restrictions by providing a crafted HTML page. This is due to insufficient validation of untrusted input . The issue affects versions prior to 150.0.7871.47 . While the impact ...

CVE-2026-14066

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14065

Insufficient validation of untrusted input in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14064

Use after free in PageInfo in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14066

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14064

A use after free flaw exists in the PageInfo component of the Google Chrome browser on Android versions prior to 150.0.7871.47 . A remote attacker could exploit this by convincing a user to perform specific UI gestures while visiting a crafted HTML page, potentially leading to arbitrary code exec...

CVE-2026-14066

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14061

Inappropriate implementation in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14061

The Dawn component in Google Chrome and Microsoft Edge is vulnerable to an inappropriate implementation flaw (CWE-284). A remote attacker can exploit this lack of access control by using a crafted HTML page to obtain potentially sensitive information from process memory. The vulnerability affects...