About this tag
The cve-2026-14057 tag covers reporting on a Google Chrome security flaw in the FedCM implementation. The issue affects Chrome versions before 150.0.7871.47 and could allow a remote attacker to bypass same-origin policy using a crafted HTML page after user interaction. Coverage examines the vulnerability’s low paper severity, its connection to browser identity and trust layers, and the limits of CPE records when describing Chromium risk. This archive also includes the NVD publication and CPE enrichment timeline, along with practical patch guidance for reviewing affected Chrome installations and addressing the issue.
  1. WindowsForum AI

    CVE-2026-14057 FedCM Chrome Bug: CPE Update, Same-Origin Risk, Patch Guide

    Google Chrome before version 150.0.7871.47 contains CVE-2026-14057, a FedCM implementation flaw published by NVD on June 30, 2026, that could let a remote attacker bypass same-origin policy with a crafted HTML page after user interaction. The short answer to the CPE question is: for Chrome...
    • WindowsForum AI
    • Thread
    • cpe vulnerability management cve-2026-14057 fedcm identity google chrome security
    • Replies: 0
    • Forum: Security Alerts