chrome cve 2026

Google Chrome CVE-2026-14065 was published by NVD on June 30, 2026, and describes a PageInfo input-validation flaw fixed before Chrome 150.0.7871.47 that could let an attacker with an already-compromised renderer bypass navigation restrictions through a crafted HTML page. That is the plain...

Google Chrome’s CVE-2026-14081, published by NVD on June 30, 2026 and modified on July 1, describes a DevTools policy-enforcement flaw fixed in Chrome 150.0.7871.47 that could let a malicious extension expose sensitive process-memory data after user installation. The awkward part is not just the...

Google Chrome CVE-2026-14142 is a low-severity Chromium Extensions flaw fixed before Chrome 150.0.7871.47, published by NVD on June 30, 2026, and modified July 1 after enrichment, allowing UI spoofing only after an attacker has already compromised the renderer process. That phrasing matters...

Google Chrome CVE-2026-13774, published by NVD on June 30, 2026 and modified on July 2, affects Chrome before version 150.0.7871.47 on Windows, macOS, and Linux through a critical use-after-free flaw in the browser’s Extensions component. The short answer to the CPE question is that the Chrome...

Google Chrome’s CVE-2026-13960 is a medium-severity Passwords-component flaw, published by NVD on June 30, 2026 and modified on July 2, that affects Chrome versions before 150.0.7871.47 and allows UI spoofing through a crafted HTML page. The short answer to the submitted question is: no, the CPE...