VulnerabilityAnalyzed
CVE-2026-14119
Type Confusion in Bluetooth in Google Chrome on Windows prior to 150.0.7871.47 allowed an attacker on the local network segment to obtain potentially sensitive information from process memory via a malicious peripheral.
MEDIUM 6.5EPSS 0.16%
Does this matter?
Lower severity and a low EPSS score (0.16%). Track it; it rarely justifies an emergency change on its own.
Description
Type Confusion in Bluetooth in Google Chrome on Windows prior to 150.0.7871.47 allowed an attacker on the local network segment to obtain potentially sensitive information from process memory via a malicious peripheral. (Chromium security severity: Low)
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.16% probability · 5th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-843
- Affected
- google/chrome
- Source
- chrome-cve-admin@google.com
References
- https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.htmlVendor Advisory
- https://issues.chromium.org/issues/513775483Permissions Required
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.