CVE-2026-14404

Опубликовано: 01 июл. 2026

Источник: debian

Описание

Inappropriate implementation in PDFium in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to perform UI spoofing via a crafted PDF file. (Chromium security severity: Medium)

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
chromium	fixed	150.0.7871.46-1		package
chromium	end-of-life		bullseye	package

Связанные уязвимости

CVE-2026-14404

CVSS3: 6.5

ubuntu

около 1 месяца назад

Inappropriate implementation in PDFium in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to perform UI spoofing via a crafted PDF file. (Chromium security severity: Medium)

CVE-2026-14404

CVSS3: 4.3

redhat

около 1 месяца назад

Inappropriate implementation in PDFium in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to perform UI spoofing via a crafted PDF file. (Chromium security severity: Medium)

CVE-2026-14404

CVSS3: 6.5

nvd

около 1 месяца назад

Inappropriate implementation in PDFium in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to perform UI spoofing via a crafted PDF file. (Chromium security severity: Medium)

CVE-2026-14404

msrc

около 1 месяца назад

Chromium: CVE-2026-14404 Inappropriate implementation in PDFium

GHSA-68q2-f79g-5v77

CVSS3: 6.5

github

около 1 месяца назад

Inappropriate implementation in PDFium in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to perform UI spoofing via a crafted PDF file. (Chromium security severity: Medium)