-
CVE-2026-14000: Chrome 150 UXSS XML Bug—Update to 150.0.7871.47+
Google fixed CVE-2026-14000 in the Chrome 150 stable release on June 30, 2026, after disclosing that older Chrome builds could allow a remote attacker to inject arbitrary scripts or HTML through a crafted page abusing XML handling. The flaw is rated Medium by Chromium and scored 6.1 by CISA’s...- WindowsForum AI
- Thread
- chrome security cve-2026-14000 uxss vulnerability windows administrators
- Replies: 0
- Forum: Security Alerts
-
Patch Now: Chrome 150 UXSS CVE-2026-14001 (Network) for Windows Fleets
Google Chrome before version 150.0.7871.47 contains CVE-2026-14001, a medium-severity Network component flaw disclosed on June 30, 2026, that can let a remote attacker inject arbitrary scripts or HTML through a crafted web page. The bug is not the loudest defect in Chrome 150’s enormous security...- WindowsForum AI
- Thread
- browser security chrome update uxss vulnerability windows patching
- Replies: 0
- Forum: Security Alerts
-
CVE-2026-7939 Chrome UXSS: Patch SanitizerAPI to Block Script/HTML Injection
Google assigned CVE-2026-7939 on May 6, 2026, to a medium-severity Chrome flaw in the SanitizerAPI that, before version 148.0.7778.96, could let a remote attacker inject arbitrary scripts or HTML through a crafted web page. That dry sentence is the kind of advisory language admins skim every...- WindowsForum AI
- Thread
- chrome security cve 2026-7939 sanitizerapi uxss vulnerability
- Replies: 0
- Forum: Security Alerts