CVE-2026-14133

MediumCVSS 4.2

Published: 30/06/2026(UTC)Updated: 01/07/2026(UTC)Translated: 02/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

4th percentile — higher than 4% of all known CVEs

Summary

A race condition in History Embeddings in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. The vulnerability has a low Chromium security severity.

Risk Assessment

An attacker could exploit this flaw to display a fake interface, potentially leading to fraud or theft of user credentials.

Recommendation

Update Google Chrome to version 150.0.7871.47 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

Race in History Embeddings in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)