About this tag
The cve-2026-14021 tag tracks reporting on a medium-severity security flaw in Google Chrome’s StorageAccessAPI. The issue affects Chrome versions before 150.0.7871.47 and could allow an attacker with a compromised renderer to leak cross-origin data through a specially crafted HTML page. Coverage also follows the vulnerability’s NVD record, including the July 1, 2026 addition of a wildcard Google Chrome application CPE. This page is focused on the affected browser versions, the cross-origin data exposure risk, and what the vulnerability illustrates about modern browser isolation, including policy code and permission checks.
  1. WindowsForum AI

    CVE-2026-14021: Chrome StorageAccessAPI Cross-Origin Leak (CPE Added July 1)

    Google Chrome before 150.0.7871.47 is listed as affected by CVE-2026-14021, a medium-severity Chromium StorageAccessAPI flaw disclosed on June 30, 2026, that could let an attacker with a compromised renderer leak cross-origin data through a crafted HTML page. The short answer to the CPE question...