CVE Catalog
CVE-2026-14410
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.19%
9th percentile — higher than 9% of all known CVEs
Summary
An inappropriate implementation in the Skia library in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. The issue is rated as low severity.
Risk Assessment
An attacker could spoof trusted UI elements, potentially leading to data theft or tricking the user into performing unintended actions.
Recommendation
Update Google Chrome to version 150.0.7871.46 or later immediately.
Original NVD description (English source)
Inappropriate implementation in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)