CVE Catalog
CVE-2026-14002
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.22%
12th percentile — higher than 12% of all known CVEs
Summary
An inappropriate implementation in Geolocation in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page.
Risk Assessment
An attacker can spoof the trusted browser interface, potentially leading to data theft or tricking the user into performing dangerous actions.
Recommendation
Immediately update Google Chrome to version 150.0.7871.47 or later.
Original NVD description (English source)
Inappropriate implementation in Geolocation in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)