PT-2026-54387

CVE-2026-14112

Published

2026-05-16

Updated

2026-09-10

Description by

CVSS 2.0

5.4

Medium

MetricsAV:N/AC:H/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47

Description An inappropriate implementation in the Enterprise component allows a remote attacker to obtain potentially sensitive information from process memory. This occurs when a user is convinced to perform specific UI gestures while interacting with a crafted HTML page.

Recommendations Update Google Chrome to version 150.0.7871.47 or later.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-203: Observable Discrepancy

Related identifiers

CVE-2026-14112

BDU:2026-13540

ECHO-7EB2-213B-D157