cve-2026-14004

CVE-2026-14004 is a medium-severity Chrome CSS vulnerability that could allow a crafted web page to leak data across web origins. Google addressed the issue in the June 30, 2026 Stable Channel desktop update, which moved Chrome users on Windows and macOS to version 150.0.7871.46/.47. The available coverage explains why cross-origin data leaks matter even without remote code execution, since they can undermine the browser’s isolation model. It also notes that Google has not reported exploitation in the wild. This tag collects coverage of the vulnerability, its technical impact, affected Chrome releases, and the security update that fixes it.