CVE-2026-14120 — Critical vulnerability brief
CVSS 9.6Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially…
Category: Critical CVEs
Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
CVE-2026-14109 — Critical vulnerability brief
CVSS 9.6Insufficient policy enforcement in Mojo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to…
CVE-2026-14101 — Critical vulnerability brief
CVSS 9.6Insufficient policy enforcement in Sandbox in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer…
CVE-2026-14104 — Critical vulnerability brief
CVSS 9.8Insufficient validation of untrusted input in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside…
CVE-2026-14106 — Critical vulnerability brief
CVSS 9.6Insufficient validation of untrusted input in Text in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised…
CVE-2026-13782 — Critical vulnerability brief
CVSS 10Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to…
CVE-2026-13785 — Critical vulnerability brief
CVSS 9.6Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who convinced a user to…
CVE-2026-13775 — Critical vulnerability brief
CVSS 9.8Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to…
CVE-2026-13776 — Critical vulnerability brief
CVSS 9.8Type Confusion in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially…
CVE-2026-13780 — Critical vulnerability brief
CVSS 9.6Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer…