chrome 150 security

CVE-2026-14083 is a low-severity Chromium HTML input-validation flaw fixed in Google Chrome 150.0.7871.47 for Windows and macOS on June 30, 2026, with NVD later adding a Chrome CPE configuration for versions before that build on July 1, 2026. The short version is that the vulnerability is real...

Google patched CVE-2026-14085 in Chrome 150.0.7871.47 for Windows and Mac on June 30, 2026, closing a low-severity Chromium CSS side-channel flaw that could let a remote attacker leak cross-origin data through a crafted HTML page. The bug is easy to dismiss because Google rated it “Low,” but the...

Google fixed CVE-2026-14106 in Chrome 150 for Android after a Text-component input-validation flaw, published by the National Vulnerability Database on June 30, 2026, was found to let an attacker with an already-compromised renderer potentially escape Chrome’s sandbox through a crafted HTML...

CVE-2026-14051 is a low-severity Chromium GamepadAPI information-disclosure flaw, published by NVD on June 30, 2026, fixed in Chrome 150.0.7871.47 for Windows and Mac, and relevant to users on Windows, macOS, and Linux running vulnerable Chrome builds before the stable-channel update. The short...

Google patched CVE-2026-14055 in Chrome 150.0.7871.47 for Windows on June 30, 2026, after documenting an input-validation flaw in Chrome’s Device Trust component that could let an attacker who had already compromised the renderer attempt a sandbox escape through a crafted HTML page. The awkward...

Google fixed CVE-2026-14095 in the Chrome 150 stable desktop release on June 30, 2026, after documenting a low-severity Browser-component validation flaw that could let an attacker who had already compromised the renderer process potentially escape the sandbox through a crafted HTML page. The...

Google fixed CVE-2026-13832 in Chrome 150.0.7871.47 for Windows and Mac, and 150.0.7871.46 for Linux, after documenting a high-severity use-after-free flaw in Headless Chrome that could let an attacker escape the browser sandbox after first compromising the renderer process. The bug landed in a...

Google fixed CVE-2026-13783, a critical use-after-free flaw in Chrome’s Views component, in the June 30, 2026 Stable Channel release that promoted Chrome 150 to desktop users on Windows, macOS, and Linux. The immediate security answer is simple: Chrome should be updated to 150.0.7871.47 or later...