cve 2026-14040

The cve 2026-14040 tag covers reporting on a low-severity use-after-free vulnerability in Chrome’s BrowserTag component. The available discussion focuses on Google’s fix in Chrome 150.0.7871.47, released through the desktop Stable Channel on June 30, 2026, and explains why the issue can still matter to enterprise administrators. Exploitation requires a malicious Chrome extension and user installation, but a compromised extension may create broader organizational risk than the Chromium severity label suggests. This archive is useful for following the vulnerability’s technical conditions, Chrome version guidance, extension-related exposure, and the difference between vendor severity ratings and enterprise risk assessments.