CVE-2026-14066: Insufficient validation of untrusted input in Google Chrome
CVE-2026-14066 is a vulnerability in Google Chrome for iOS prior to version 150.0.7871.47 where insufficient validation of untrusted input allows a remote attacker to bypass navigation restrictions using a crafted HTML page. The issue is classified with low severity by Chromium security. No known exploits are reported in the wild. The vulnerability affects Chrome on iOS devices before the specified fixed version.
AI Analysis
Technical Summary
This vulnerability involves insufficient validation of untrusted input in Google Chrome on iOS versions before 150.0.7871.47. An attacker can craft a malicious HTML page that bypasses navigation restrictions, potentially leading to unintended navigation behavior. The Chromium project rates this issue as low severity. The fixed version is 150.0.7871.47. No CVSS score is provided, and no vendor advisory explicitly states the remediation status beyond the version update.
Potential Impact
A remote attacker can bypass navigation restrictions in affected versions of Chrome on iOS by leveraging crafted HTML content. This could lead to unexpected navigation flows within the browser, but the overall severity is low according to the Chromium security team. There are no known exploits in the wild at this time.
Mitigation Recommendations
Upgrade Google Chrome on iOS to version 150.0.7871.47 or later to remediate this vulnerability. Since this version is identified as the fixed release, applying this update will address the issue. No other mitigation steps are indicated by the vendor advisory.
CVE-2026-14066: Insufficient validation of untrusted input in Google Chrome
Description
CVE-2026-14066 is a vulnerability in Google Chrome for iOS prior to version 150.0.7871.47 where insufficient validation of untrusted input allows a remote attacker to bypass navigation restrictions using a crafted HTML page. The issue is classified with low severity by Chromium security. No known exploits are reported in the wild. The vulnerability affects Chrome on iOS devices before the specified fixed version.
Affected software
pkg:github/chromium/chromiumRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves insufficient validation of untrusted input in Google Chrome on iOS versions before 150.0.7871.47. An attacker can craft a malicious HTML page that bypasses navigation restrictions, potentially leading to unintended navigation behavior. The Chromium project rates this issue as low severity. The fixed version is 150.0.7871.47. No CVSS score is provided, and no vendor advisory explicitly states the remediation status beyond the version update.
Potential Impact
A remote attacker can bypass navigation restrictions in affected versions of Chrome on iOS by leveraging crafted HTML content. This could lead to unexpected navigation flows within the browser, but the overall severity is low according to the Chromium security team. There are no known exploits in the wild at this time.
Mitigation Recommendations
Upgrade Google Chrome on iOS to version 150.0.7871.47 or later to remediate this vulnerability. Since this version is identified as the fixed release, applying this update will address the issue. No other mitigation steps are indicated by the vendor advisory.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Chrome
- Date Reserved
- 2026-06-29T23:11:35.246Z
- Cvss Version
- null
- State
- PUBLISHED
- Remediation Level
- null
- Vendor Advisory Urls
- [{"url":"https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html","vendor":"Google"}]
Threat ID: 6a444c3027e9c7971985d357
Added to database: 06/30/2026, 23:07:28 UTC
Last enriched: 07/01/2026, 01:08:19 UTC
Last updated: 07/01/2026, 02:11:33 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.