CVE Catalog

CVE-2026-14082

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.21%

11th percentile — higher than 11% of all known CVEs

Summary

A race condition in the Storage component of Google Chrome prior to version 150.0.7871.47 allows a remote attacker to leak cross-origin data via a crafted HTML page.

Risk Assessment

The risk for the organization is the potential unauthorized access to browser-stored data, which could lead to a breach of user information confidentiality.

Recommendation

It is recommended to immediately update Google Chrome to version 150.0.7871.47 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

Race in Storage in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS