← Back

CVE-2026-14062

nvd nist
Published: Jun 30, 2026Modified: Jul 2, 2026

JSON object

Loading...
5.9
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.2 / Impact: 3.6
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Inappropriate implementation in Views in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. (Chromium security severity: Low)

Affected (1)

Products: Google: Chrome
Google
1 product
Chrome
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Chrome
Before 150.0.7871.47
Running on/withPlatform Versions
Google
Chrome Os
All versions

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

Source: chrome-cve-admin@google.com
Vendor AdvisoryRelease Notes
Source: chrome-cve-admin@google.com
Permissions Required

Timeline

No history available yet.