CVE-2026-14064
High · 7.5CVSS
7.5
EPSS
0.4%
Published
Jun 30, 2026
CISA due date
—
The record
Use after free in PageInfo in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Low)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| openSUSE:Tumbleweed | chromium | 0 | 150.0.7871.46-1.1 |
Related vulnerabilities
- CVE-2026-14137 Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS… Also affects chromium
- CVE-2026-14140 Insufficient validation of untrusted input in Input in Google Chrome on Android prior to… Also affects chromium
- CVE-2026-14141 Incorrect security UI in Document Picture-in-Picture in Google Chrome on Android prior to… Also affects chromium
- CVE-2026-14126 Incorrect security UI in UI in Google Chrome on Android prior to 150.0.7871.47 allowed a… Also affects chromium
- CVE-2026-14124 Inappropriate implementation in CredentialProvider in Google Chrome on Windows prior to… Also affects chromium
- CVE-2026-14134 Inappropriate implementation in Autofill in Google Chrome on Android prior to… Also affects chromium
- CVE-2026-14114 Inappropriate implementation in WebAppInstalls in Google Chrome on Android prior to… Also affects chromium
- CVE-2026-14080 Insufficient validation of untrusted input in TabSwitcher in Google Chrome on Android… Also affects chromium