cve 2026 14099

The cve 2026 14099 tag covers reporting on a use-after-free vulnerability in Chrome for iOS before version 150.0.7871.47. The flaw could allow a remote attacker to corrupt heap memory after a user performs specific interface gestures on a crafted HTML page viewed in the vulnerable browser. Google rates the issue Low, while CISA’s enrichment gives it an 8.8 High score based on potentially serious effects on confidentiality, integrity, and availability. Coverage also explains the difference between the technical impact and the practical attack path, including required user interaction, resistance to automation, and the absence of known exploitation. The primary guidance is to update Chrome for iOS.