Skip to content
6.5 Medium

CVE-2026-14081 Insufficient policy enforcement in DevTools in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced…

Description

Insufficient policy enforcement in DevTools in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. (Chromium security severity: Low)

Affected products and versions

Product Affected versions Fixed in
Chrome 150.0 earliest → < 150.0.7871.47 150.0.7871.47
The 6072 CVEs of Chrome →
Track this CVE