cve-2026-14076

The cve-2026-14076 tag covers reporting on a low-severity Chromium network policy-enforcement flaw addressed in Chrome 150.0.7871.47. The issue could allow a remote attacker to bypass Content Security Policy using a specially crafted HTML page. Coverage focuses on Google’s June 30, 2026 disclosure, the relevant Chrome release, and the practical need to update Chrome and other Chromium-based browsers. Neither Google nor CISA reported exploitation of the vulnerability, but the weakness remains relevant to enterprise defenders because browser policy flaws can become more serious when combined with other vulnerabilities. This archive collects guidance and discussion about the affected browser security behavior and remediation.