cisa cvss

The cisa cvss tag covers analysis of vulnerability scoring and risk context when security advisories present differing assessments. Current coverage examines Chrome CVE-2026-14078, a WebRTC input-validation flaw fixed in Chrome 150.0.7871.47. The discussion compares Google’s Low Chromium severity with CISA’s ADP enrichment, which assigns a high CVSS 3.1 score of 8.8 and identifies potential impacts to confidentiality, integrity, and availability. It also highlights the importance of reviewing public vulnerability metadata, understanding remotely reachable browser flaws triggered by crafted HTML pages, and prioritizing timely patching when severity labels tell different risk stories.