CVE Catalog
CVE-2026-14057
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.19%
8th percentile — higher than 8% of all known CVEs
Summary
An inappropriate implementation in FedCM in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. The issue is rated as low severity.
Risk Assessment
An attacker could exploit this vulnerability to break domain isolation, potentially leading to data leakage or unauthorized access to resources.
Recommendation
It is recommended to update Google Chrome to version 150.0.7871.47 or later immediately.
Original NVD description (English source)
Inappropriate implementation in FedCM in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Low)