> CVE-2026-14074

« BACK_TO_HOME
PUBLISHED
2026-06-30 23:17
MODIFIED
2026-06-30 23:17
EPSS (Prob. Exploit)
0.36%
Top 71.9%
DATA SOURCES:
NVD 🔗 2026-07-01 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-10-25 MSRC 🔗 2026-11-02

> DESCRIPTION

Side-channel information leakage in WebAuthentication in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-1300

> CWE DETAILED DESCRIPTIONS

CWE-1300: Improper Protection of Physical Side Channels - The device does not contain sufficient protection mechanisms to prevent physical side channels from exposing sensitive information due to patterns in physically observable phenomena such as variations in power consumption, electromagnetic emissions (EME), or acoustic emissions.

> HISTORIQUE DES MODIFICATIONS

Première apparition
30/06/2026 23:17
Source: NVD
📊 ENRICHISSEMENT 01/07/2026 06:01
CWE
Champ modifié: Description CWE
Ancienne valeur:
N/A
Nouvelle valeur:
CWE-1300: Improper Protection of Physical Side Channels - The device does not contain sufficient protection mechanisms to prevent physical side channels from exposing sensitive information due to pa...
Total des modifications: 1 Dernière mise à jour: 4 months ago

> REFERENCES

https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_...
https://issues.chromium.org/issues/511743480
« BACK_TO_HOME