CVE-2026-14404

Inappropriate implementation in PDFium in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to perform UI spoofing via a crafted PDF file. (Chromium security severity: Medium)

Score
CVSS 3.1 6.5 Medium
Status
Analyzed - chrome-cve-admin@google.com
Published
2026-07-01
Last modified
2026-10-25
Weaknesses
CWE-451

Affected products

References