CVE-2026-14022
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk22th percentile — higher than 22% of all known CVEs
Summary
Insufficient validation of untrusted input in the Network component of Google Chrome prior to version 150.0.7871.47 allows a remote attacker who has compromised the renderer process to leak cross-origin data via a crafted HTML page.
Risk Assessment
The risk involves potential theft of sensitive cross-origin data, leading to privacy breaches and leakage of business information within the organization.
Recommendation
Immediately update Google Chrome to version 150.0.7871.47 or later. Ensure the update policy covers all workstations in the organization.
Original NVD description (English source)
Insufficient validation of untrusted input in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)