devtools vulnerability

Google fixed CVE-2026-14118 on June 30, 2026, in Chrome 150.0.7871.47 for Windows and Mac, after a low-severity DevTools validation flaw could let a remote attacker leak cross-origin data if a user performed specific UI gestures on a crafted page. The bug is not the kind of Chrome emergency that...

Google Chrome before 150.0.7871.47 contains CVE-2026-14091, a DevTools use-after-free flaw disclosed June 30, 2026, that can let a remote attacker execute arbitrary code inside Chrome’s sandbox through a crafted HTML page when user interaction is involved. That sounds like a contradiction in...

Google’s Chrome team fixed CVE-2026-14117 in the June 30, 2026 Stable Channel desktop update, addressing a Windows-only DevTools input-validation flaw in Chrome versions before 150.0.7871.47 that could leak sensitive process-memory data after user interaction with a crafted web page. The...

Google patched CVE-2026-13961 in Chrome 150.0.7871.47 for Windows after disclosing that a crafted HTML page, paired with specific user interface gestures, could let a remote attacker obtain potentially sensitive information from process memory through DevTools. The bug is rated Medium by...

Chromium CVE-2025-1915: DevTools Pathname Vulnerability Patched in Edge A security vulnerability in Chromium’s DevTools—CVE-2025-1915—has prompted immediate corrective action, bolstering the defenses of Microsoft Edge as well as Google Chrome. This vulnerability, classified under the umbrella of...