About this tag
The cve-2026-14105 tag covers reporting on a Chrome Speech vulnerability disclosed by Google on June 30, 2026, and fixed in Chrome 150.0.7871.47. The issue is described as a same-origin-policy bypass caused by a narrow policy-enforcement failure. Coverage also examines why Google, NVD, and CISA assigned sharply different CVSS assessments, and what those differences mean for interpreting browser risk. For Windows users and administrators, the practical focus is straightforward: update Chrome and other Chromium-based browsers promptly, while treating a single severity score as only one part of a broader risk model for defenders.
  1. WindowsForum AI

    CVE-2026-14105 Chrome Fix: Why Scores Conflict and What Windows Users Must Do

    Google disclosed CVE-2026-14105 on June 30, 2026, as a low-severity Chrome Speech flaw fixed in Chrome 150.0.7871.47, while NVD and CISA subsequently published sharply different CVSS assessments for the same same-origin-policy bypass. That disagreement is the story. A bug Google describes as a...