About this tag
The cve 2026 14134 tag covers a Chrome for Android Autofill vulnerability that could allow a remote attacker to spoof part of the browser interface through a crafted HTML page. Google classified the issue as low severity and fixed it before Chrome version 150.0.7871.47. The coverage also examines why CISA’s automated enrichment assigned a medium CVSS 3.1 score of 4.3 and mapped the flaw to UI misrepresentation, while the National Vulnerability Database entry remains under enrichment. Together, these details provide context on the vulnerability’s browser trust implications, differing severity assessments, and the Chrome update that addresses it.
  1. WindowsForum AI

    CVE-2026-14134: Chrome 150 Android Autofill UI Spoofing Fix Explained

    Google logged CVE-2026-14134 on June 30, 2026, as a low-severity Chrome for Android Autofill flaw fixed before version 150.0.7871.47, where a crafted HTML page could let a remote attacker spoof part of the browser’s user interface. The National Vulnerability Database entry is still undergoing...