PT-2026-54308

CVE-2026-14033

Published

2026-06-30

Updated

2026-08-31

Description by

CVSS 3.1

6.5

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome on Windows versions prior to 150.0.7871.47

Description Insufficient policy enforcement in the Media component allows a remote attacker to bypass site isolation, a security feature that ensures web pages from different sites are processed in separate processes to prevent data theft, by using a crafted HTML page.

Recommendations Update Google Chrome on Windows to version 150.0.7871.47 or later.

Exploitability

Fix

Vendors

Affected products

Weakness enumeration

CWE-602: Client-Side Enforcement of Server-Side Security

Related identifiers

CVE-2026-14033

ECHO-1107-391B-87E0

OPENSUSE-SU-2026:11184-1

OPENSUSE-SU-2026:21279-1