[CVE-2026-14090] Insufficient validation of untrusted input in CameraCapture in Google Chrome on ChromeOS prior to 15…

Descripción técnica

Insufficient validation of untrusted input in CameraCapture in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Low)

Puntuación CVSS

Score: 8.1/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Productos afectados

Chrome, Chrome os — Google

Debilidades (CWE)

CWE-125

Fuente oficial

Publicado en NIST NVD.