cve 2026 14096

CVE 2026 14096 identifies an information-disclosure flaw in Google Chrome for Android versions earlier than 150.0.7871.47. The issue can allow an attacker who has already compromised the browser renderer to expose cross-origin data using crafted HTML. It is not described as a stand-alone browser takeover, but it can weaken an important confidentiality boundary after another exploit succeeds. Google rates the Chromium security severity Low, while CISA-ADP assigns a CVSS 3.1 score of 6.5, rated Medium. This tag focuses on the vulnerability, its security impact, and the recommended response: update Chrome on Android and verify that version 150.0.7871.47 or later is installed.