CVE-2026-14404

Summary

Inappropriate implementation in PDFium in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to perform UI spoofing via a crafted PDF file. (Chromium security severity: Medium)

Affected Software

VendorProductVersion RangeStatus
GoogleChrome150.0.7871.46 < 150.0.7871.46affected

Weaknesses

  • Inappropriate implementation

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References