CVE-2026-14025

Google Chrome on macOS contains a use-after-free in Views that can lead to heap corruption when a user is lured into specific UI gestures and loads a crafted HTML page. Affected version range is prior to 150.0.7871.47. The issue is triggered via a crafted HTML page and remote attacker interaction...

CVE-2025-8881

Inappropriate implementation in File Picker in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...