CVE-2026-14105

Insufficient policy enforcement in Speech in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-14105

Google Chrome SPEECH component suffers insufficient policy enforcement before version 150.0.7871.47, allowing a remote attacker to bypass the same-origin policy via a crafted HTML page. Affected product: Chrome (Speech). Root cause: policy enforcement gap in the Speech feature. Impact: potential ...