CVE-2026-14023

MediumCVSS 6.5

Published: 30/06/2026(UTC)Updated: 01/07/2026(UTC)Translated: 02/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

24th percentile — higher than 24% of all known CVEs

Summary

Insufficient validation of untrusted input in SanitizerAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page.

Risk Assessment

An attacker can bypass browser security mechanisms, potentially gaining access to data from other origins, which may lead to theft of sensitive information or cross-site scripting attacks.

Recommendation

Immediately update Google Chrome to version 150.0.7871.47 or later to remediate the vulnerability.

Original NVD description (English source)

Insufficient validation of untrusted input in SanitizerAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)