CVE-2026-14145

The Chromium browser (including Google Chrome and Microsoft Edge ) is vulnerable to a Cross-Site Scripting (UXSS) flaw in its CSS component . The root cause is an inappropriate implementation that fails to sufficiently protect the structure of web pages, allowing a remote attacker to inject arbit...

CVE-2026-14083

Insufficient validation of untrusted input in HTML in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14083

Insufficient validation of untrusted input in HTML in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14068

Inappropriate implementation in Omnibox in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14068

Inappropriate implementation in Omnibox in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14000

Inappropriate implementation in XML in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-14000

An inappropriate implementation flaw in the XML component of the Chromium browser (including Google Chrome and Microsoft Edge ) allows a remote attacker to inject arbitrary scripts or HTML (UXSS ) via a crafted HTML page. This vulnerability stems from a lack of measures to protect the structure o...

CVE-2026-14000

Inappropriate implementation in XML in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-14001

Inappropriate implementation in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-14001

An inappropriate implementation flaw in the Network component of the Chromium browser (including Google Chrome and Microsoft Edge ) allows a remote attacker to inject arbitrary scripts or HTML (UXSS ) via a crafted HTML page. This vulnerability is present in versions of Chrome prior to 150.0.7871...

CVE-2026-13977

Inappropriate implementation in HTMLParser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13977

An inappropriate implementation flaw in the HTMLParser component of the Chromium browser (including Google Chrome and Microsoft Edge ) allows a remote attacker to inject arbitrary scripts or HTML via a crafted page. This vulnerability, classified as UXSS (User Cross-Site Scripting), can be exploi...

CVE-2026-13957

Incorrect security UI in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13946

Inappropriate implementation in ScriptInjections in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13946

Inappropriate implementation in ScriptInjections in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13946

An inappropriate implementation flaw was discovered in the ScriptInjections component of the Chromium browser. This vulnerability allowed a remote attacker to leak cross-origin data by navigating to a crafted HTML page. The issue was present in Google Chrome on iOS versions prior to 150.0.7871.47...

CVE-2026-13946

Inappropriate implementation in ScriptInjections in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13836

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: High...

CVE-2026-13836

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: High...

CVE-2026-13836

A vulnerability in the CSS component of Google Chrome (prior to version 150.0.7871.47) and Microsoft Edge allows a remote attacker to inject arbitrary scripts or HTML via a UXSS (User Cross-Site Scripting) attack. This is caused by an inappropriate implementation in CSS that fails to protect web ...