PT-2026-54278

CVE-2026-14002

Published

2026-05-19

Updated

2026-09-10

Description by

CVSS 2.0

7.8

High

MetricsAV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47

Description An inappropriate implementation in the Geolocation feature allows a remote attacker who has already compromised the renderer process to perform UI spoofing. This is achieved by using a specially crafted HTML page to deceive the user through the interface.

Recommendations Update Google Chrome to version 150.0.7871.47 or later.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-451: User Interface (UI) Misrepresentation of Critical Information

Related identifiers

CVE-2026-14002

BDU:2026-13444

ECHO-F92B-9C1E-62F4