CVE-2026-14020

The Chromium browser is affected by an insufficient validation of untrusted input flaw in the WebXR component (prior to version 150.0.7871.47 ). A remote attacker who has already compromised the renderer process can exploit this vulnerability to perform UI spoofing via a specially crafted HTML pa...

CVE-2026-14019

Inappropriate implementation in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-14017

Inappropriate implementation in Navigation in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-14017

A vulnerability in the Navigation component of the Chromium browser (including Google Chrome and Microsoft Edge ) was caused by an inappropriate implementation and a lack of data security mechanisms. A remote attacker who has compromised the renderer process could exploit this via a crafted HTML ...

CVE-2026-14016

Inappropriate implementation in SVG in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-14017

Inappropriate implementation in Navigation in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-14015

A race condition in the WebRTC component of the Chromium browser (affecting Google Chrome on Windows prior to version 150.0.7871.47) allows a remote attacker to leak cross-origin data via a crafted HTML page. This vulnerability is categorized as a Medium severity issue. Remediation involves updat...

CVE-2026-14013

Inappropriate implementation in SVG in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-14013

An inappropriate implementation flaw in the SVG component of the Chromium browser (including Google Chrome and Microsoft Edge ) allows a remote attacker to perform UI spoofing through a crafted HTML page. This vulnerability can lead to a compromise of data integrity by falsely representing critic...

CVE-2026-14013

Inappropriate implementation in SVG in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-14015

Race in WebRTC in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-14014

Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-14010

Uninitialized Use in Codecs in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-14011

Out of bounds read in SurfaceCapture in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-14010

Uninitialized Use in Codecs in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-14010

A use of uninitialized variable flaw exists in the Codecs component of the Chromium browser on Windows. This vulnerability, identified as CVE-2026-14010 , allows a remote attacker to obtain potentially sensitive information from process memory by using a crafted HTML page . The issue is present i...

CVE-2026-14012

A side-channel information leakage flaw exists in the CSS component of the Chromium browser (impacting Google Chrome and Microsoft Edge ). A remote attacker can exploit this vulnerability by using a crafted HTML page to obtain potentially sensitive information from process memory. The issue is re...

CVE-2026-14011

An out-of-bounds read flaw exists in the SurfaceCapture component of the Chromium browser (including Google Chrome and Microsoft Edge). A remote attacker can exploit this vulnerability by using a crafted HTML page to perform an out-of-bounds memory read, potentially allowing them to gain access t...

CVE-2026-14011

Out of bounds read in SurfaceCapture in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-14012

Side-channel information leakage in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...