PT-2026-54358

CVE-2026-14083

Published

2026-05-14

Updated

2026-09-10

Description by

CVSS 2.0

6.4

Medium

MetricsAV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47

Description Insufficient validation of untrusted input in HTML allows a remote attacker to perform Universal Cross-Site Scripting (UXSS), which is a vulnerability that enables the execution of arbitrary scripts or HTML across different origins, via a crafted HTML page.

Recommendations Update Google Chrome to version 150.0.7871.47 or later.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-20: Improper Input Validation

Related identifiers

CVE-2026-14083

BDU:2026-13521

ECHO-6EA9-61A4-B267