CVE-2026-14052

Insufficient policy enforcement in FileSystem in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14049

Inappropriate implementation in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14046

Inappropriate implementation in CustomTabs in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14046

An inappropriate implementation flaw in the CustomTabs component of the Chromium browser (affecting Google Chrome on Android prior to version 150.0.7871.47 ) allows a remote attacker to bypass the same origin policy via a crafted HTML page. This vulnerability has been addressed in updated version...

CVE-2026-14045

A vulnerability in the Network component of the Chromium browser (and potentially Microsoft Edge ) allows a remote attacker to leak cross-origin data . The root cause is insufficient validation of untrusted input , which can be triggered via a crafted HTML page by an attacker who has already comp...

CVE-2026-14046

Inappropriate implementation in CustomTabs in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14044

Use after free in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14043

Use after free in GetUserMedia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14044

A use-after-free vulnerability exists in the ANGLE component of Google Chrome (prior to version 150.0.7871.47). A remote attacker who has already compromised the renderer process can exploit this flaw via a crafted HTML page to potentially perform a sandbox escape . While the Chromium security se...

CVE-2026-14041

Insufficient policy enforcement in Serial in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14039

Insufficient policy enforcement in GetUserMedia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14039

Insufficient policy enforcement in GetUserMedia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14041

Insufficient policy enforcement in Serial in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14041

The Serial component in the Chromium browser (including Google Chrome and Microsoft Edge ) is vulnerable to an insufficient policy enforcement flaw. A remote attacker can exploit this vulnerability by navigating the victim to a crafted HTML page , which may allow for privilege escalation or cause...

CVE-2026-14041

Insufficient policy enforcement in Serial in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14038

Insufficient validation of untrusted input in New Tab Page in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14037

Insufficient policy enforcement in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14036

A vulnerability exists in the Bluetooth component of Google Chrome (prior to version 150.0.7871.47) due to insufficient policy enforcement . A remote attacker can exploit this defect by using a crafted HTML page to perform privilege escalation . Similar vulnerabilities have been reported in Micro...

CVE-2026-14038

The New Tab Page component in the Chromium browser (affecting Google Chrome and Microsoft Edge ) is vulnerable to an insufficient validation of untrusted input flaw. A remote attacker who has already compromised the renderer process can leverage this vulnerability to perform a sandbox escape by p...

CVE-2026-14037

An insufficient policy enforcement flaw exists in the GPU component of the Chromium browser (including Google Chrome and Microsoft Edge). A remote attacker who has compromised the renderer process can potentially perform a sandbox escape by navigating to a crafted HTML page. This vulnerability af...