CVE-2026-13914
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk2th percentile — higher than 2% of all known CVEs
Summary
In Google Chrome on Mac prior to version 150.0.7871.47, an inappropriate implementation in the Passwords module allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file.
Risk Assessment
A local attacker could steal credentials or other confidential data stored in the browser's memory, posing a risk to user data confidentiality.
Recommendation
Immediately update Google Chrome on Mac to version 150.0.7871.47 or later, which includes a fix for this vulnerability.
Original NVD description (English source)
Inappropriate implementation in Passwords in Google Chrome on Mac prior to 150.0.7871.47 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. (Chromium security severity: Medium)