CVE-2026-14036

HighCVSS 8.8

Published: 30/06/2026(UTC)Updated: 02/07/2026(UTC)Translated: 03/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

13th percentile — higher than 13% of all known CVEs

Summary

Insufficient policy enforcement in Bluetooth in Google Chrome prior to 150.0.7871.47 allows a remote attacker to perform privilege escalation via a crafted HTML page.

Risk Assessment

An attacker could escalate privileges within the browser context, potentially gaining access to sensitive data or system functions.

Recommendation

Immediately update Google Chrome to version 150.0.7871.47 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

Insufficient policy enforcement in Bluetooth in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Low)