Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-14014
Medium · 6.5
CWE-451 Jun 30, 2026
Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a…
Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-14013
Medium · 4.3
CWE-451 Jun 30, 2026
Inappropriate implementation in SVG in Google Chrome prior to 150.0.7871.47 allowed a…
Inappropriate implementation in SVG in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-14002
Medium · 6.5
CWE-451 Jun 30, 2026
Inappropriate implementation in Geolocation in Google Chrome prior to 150.0.7871.47…
Inappropriate implementation in Geolocation in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13998
Medium · 4.2
CWE-451 Jun 30, 2026
Incorrect security UI in File Input in Google Chrome on Mac prior to 150.0.7871.47…
Incorrect security UI in File Input in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13997
Medium · 4.2
CWE-451 Jun 30, 2026
Incorrect security UI in Extensions in Google Chrome on Android prior to 150.0.7871.47…
Incorrect security UI in Extensions in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13996
Medium · 6.5
CWE-451 Jun 30, 2026
Inappropriate implementation in Permissions in Google Chrome prior to 150.0.7871.47…
Inappropriate implementation in Permissions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13994
Medium · 4.3
CWE-451 Jun 30, 2026
Inappropriate implementation in Credential Management in Google Chrome on Android prior…
Inappropriate implementation in Credential Management in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13993
Medium · 4.2
CWE-451 Jun 30, 2026
Incorrect security UI in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed…
Incorrect security UI in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform domain spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13992
Medium · 4.2
CWE-451 Jun 30, 2026
Inappropriate implementation in UI in Google Chrome on Mac prior to 150.0.7871.47…
Inappropriate implementation in UI in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13989
Medium · 5.3
CWE-451 Jun 30, 2026
Inappropriate implementation in PageInfo in Google Chrome prior to 150.0.7871.47 allowed…
Inappropriate implementation in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13988
Medium · 6.5
CWE-451 Jun 30, 2026
Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a…
Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13987
Medium · 4.3
CWE-451 Jun 30, 2026
Incorrect security UI in Mobile in Google Chrome on Android prior to 150.0.7871.47…
Incorrect security UI in Mobile in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13986
Medium · 4.2
CWE-451 Jun 30, 2026
Inappropriate implementation in Media UI in Google Chrome on ChromeOS prior to…
Inappropriate implementation in Media UI in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13983
Medium · 4.2
CWE-451 Jun 30, 2026
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to…
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13982
Low · 3.1
CWE-451 Jun 30, 2026
Incorrect security UI in Passwords in Google Chrome prior to 150.0.7871.47 allowed a…
Incorrect security UI in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13981
Medium · 4.3
CWE-451 Jun 30, 2026
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to…
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13980
Medium · 4.3
CWE-451 Jun 30, 2026
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to…
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13979
Medium · 4.3
CWE-451 Jun 30, 2026
Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a…
Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13978
Medium · 4.3
CWE-451 Jun 30, 2026
Insufficient policy enforcement in PageInfo in Google Chrome prior to 150.0.7871.47…
Insufficient policy enforcement in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13973
Medium · 4.2
CWE-451 Jun 30, 2026
Inappropriate implementation in UI in Google Chrome prior to 150.0.7871.47 allowed a…
Inappropriate implementation in UI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13972
Medium · 4.3
CWE-451 Jun 30, 2026
Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a…
Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13966
Medium · 4.3
CWE-451 Jun 30, 2026
Inappropriate implementation in History in Google Chrome prior to 150.0.7871.47 allowed…
Inappropriate implementation in History in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13960
Medium · 4.3
CWE-451 Jun 30, 2026
Inappropriate implementation in Passwords in Google Chrome prior to 150.0.7871.47…
Inappropriate implementation in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13956
Medium · 4.2
CWE-451 Jun 30, 2026
Incorrect security UI in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a…
Incorrect security UI in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13948
Low · 3.1
CWE-451 Jun 30, 2026
Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47…
Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Medium)