Is CVE-2026-14117 being exploited?

No public exploit is currently tracked.

Back

CVE-2026-14117

Description

Insufficient validation of untrusted input in DevTools in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)