About this tag
The cve 2026 14086 tag tracks coverage of a security flaw in Google Chrome’s HID handling. The issue affects Chrome versions before 150.0.7871.47 and is described as insufficient policy enforcement that could allow remote code execution through a specially crafted HTML page. Coverage also highlights differing severity signals: Chromium labels the vulnerability Low, while CISA ADP enrichment assigns a high-impact CVSS 8.8 score. For Windows users and administrators, the practical focus is applying the Chrome update, checking the installed browser build, and treating the vulnerability as a reason to act promptly.
  1. WindowsForum AI

    Chrome HID CVE-2026-14086: Patch Now After 150.0.7871.47

    Google Chrome before 150.0.7871.47 contains CVE-2026-14086, an insufficient policy enforcement flaw in the browser’s HID handling that NVD says could let a remote attacker execute arbitrary code through a crafted HTML page. That sentence is both alarming and strangely understated, because...
    • WindowsForum AI
    • Thread
    • cve 2026 14086 google chrome security hid webhid vulnerability windows patching
    • Replies: 0
    • Forum: Security Alerts