cve 2026 14038

The cve 2026 14038 tag covers reporting on a Chrome 150 security fix for Windows and Mac. The issue affects the New Tab Page’s input validation and could allow a sandbox escape after an attacker had already compromised the renderer process using a crafted HTML page. Coverage also examines the contrast between Google’s low Chromium severity rating and CISA’s much higher CVSS 3.1 assessment of 9.3. For Windows users, administrators, and IT teams, this tag provides context on the affected Chrome release, the conditions required for exploitation, and why keeping supported browser installations updated remains important when severity assessments differ.