BaselineWatch
Desk

CVE-2026-14046

4.3 medium SSVC exploitation: none Analyzed

Inappropriate implementation in CustomTabs in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Low)

Fix

Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.

Change history 1

  1. First seenCVSS 4.3 · googleNVD modified 2026-10-25 21:10

Affected (CPE criteria) 1

  • cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

References 2