CVE-2026-14140
Medium · 4.3CVSS
4.3
EPSS
0.2%
Published
Jun 30, 2026
CISA due date
—
The record
Insufficient validation of untrusted input in Input in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| openSUSE:Tumbleweed | chromium | 0 | 150.0.7871.46-1.1 |
Related vulnerabilities
- CVE-2026-14137 Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS… Also affects chromium
- CVE-2026-14141 Incorrect security UI in Document Picture-in-Picture in Google Chrome on Android prior to… Also affects chromium
- CVE-2026-14126 Incorrect security UI in UI in Google Chrome on Android prior to 150.0.7871.47 allowed a… Also affects chromium
- CVE-2026-14124 Inappropriate implementation in CredentialProvider in Google Chrome on Windows prior to… Also affects chromium
- CVE-2026-14134 Inappropriate implementation in Autofill in Google Chrome on Android prior to… Also affects chromium
- CVE-2026-14114 Inappropriate implementation in WebAppInstalls in Google Chrome on Android prior to… Also affects chromium
- CVE-2026-14080 Insufficient validation of untrusted input in TabSwitcher in Google Chrome on Android… Also affects chromium
- CVE-2026-14075 Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to… Also affects chromium