cve-2026-14009

The cve-2026-14009 tag covers reporting on a Chrome 150 security flaw in the browser’s Passwords component. The issue involved insufficient data validation that could lead to heap corruption when a user opened a crafted HTML page. Google addressed the vulnerability in the June 30, 2026 Chrome 150 stable desktop update, with versions before 150.0.7871.47 identified as affected. Coverage also considers the operational importance of the issue for organizations managing Chrome or other Chromium-based browsers, particularly where password handling, memory safety, and browser update compliance are involved. This page collects the available discussion about the vulnerability, its affected versions, and the need to apply the upstream fix.