CVE-2026-14076

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47

Description Insufficient policy enforcement in the Network component allows a remote attacker to bypass the Content Security Policy (CSP), which is a security layer used to detect and mitigate certain types of attacks, such as cross-site scripting (XSS) and data injection, by restricting the sources from which content can be loaded. This bypass can be achieved through the use of a crafted HTML page.

Recommendations Update Google Chrome to version 150.0.7871.47 or later.