CVE Catalog
CVE-2026-14007
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.26%
18th percentile — higher than 18% of all known CVEs
Summary
Insufficient policy enforcement in PermissionsPolicy in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
Risk Assessment
An attacker could exploit this vulnerability to redirect users to malicious sites or bypass browser security controls, potentially leading to data leakage or further attacks.
Recommendation
Immediately update Google Chrome to version 150.0.7871.47 or later, which includes a fix for this vulnerability.
Original NVD description (English source)
Insufficient policy enforcement in PermissionsPolicy in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)