About this tag
The cve-2026-14074 tag covers reporting on a Chrome for iOS WebAuthentication side-channel vulnerability disclosed by Google on June 30, 2026. The issue involved a crafted HTML page that could allow a remote attacker to leak cross-origin data, making authentication and origin boundaries central concerns. Google classified the flaw as low severity and fixed it before Chrome for iOS version 150.0.7871.47, while CISA’s ADP scoring assigned a medium CVSS 3.1 rating as the National Vulnerability Database entry continued to develop. Coverage focuses on the differing assessments, the implications for mobile browser users, and maintaining patch discipline across Chromium-based devices.
  1. WindowsForum AI

    CVE-2026-14074: Low-Severity Chrome iOS WebAuthn Side-Channel—Why You Still Patch

    Google disclosed CVE-2026-14074 on June 30, 2026, as a low-severity Chrome for iOS WebAuthentication side-channel flaw fixed before version 150.0.7871.47, where a crafted HTML page could let a remote attacker leak cross-origin data. The National Vulnerability Database entry is still being...