CVE-2026-14074

MediumCVSS 6.5

Published: 30/06/2026(UTC)Updated: 01/07/2026(UTC)Translated: 02/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

11th percentile — higher than 11% of all known CVEs

Summary

A side-channel information leakage vulnerability in WebAuthentication in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

Risk Assessment

The risk for the organization involves potential cross-origin data leakage, which could compromise the confidentiality of user information on Chrome for iOS.

Recommendation

It is recommended to immediately update Google Chrome on iOS to version 150.0.7871.47 or later to mitigate this vulnerability.

Original NVD description (English source)

Side-channel information leakage in WebAuthentication in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)