# Vulnerabilities published in 2026


- [CVE-2026-14147](https://insights.sbomify.com/CVE-2026-14147/): Cross-site scripting in Chrome (medium 6.1)
- [CVE-2026-14146](https://insights.sbomify.com/CVE-2026-14146/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-14145](https://insights.sbomify.com/CVE-2026-14145/): Cross-site scripting in Chrome (medium 6.1)
- [CVE-2026-14144](https://insights.sbomify.com/CVE-2026-14144/): Other in Chrome (medium 4.2)
- [CVE-2026-14143](https://insights.sbomify.com/CVE-2026-14143/): Other in Chrome (medium 4.3)
- [CVE-2026-14142](https://insights.sbomify.com/CVE-2026-14142/): Other in Chrome (medium 4.3)
- [CVE-2026-14141](https://insights.sbomify.com/CVE-2026-14141/): Other in Chrome (medium 4.3)
- [CVE-2026-14140](https://insights.sbomify.com/CVE-2026-14140/): Other in Chrome (medium 4.3)
- [CVE-2026-1414](https://insights.sbomify.com/CVE-2026-1414/): Command injection in Operation and Maintenance Security Management System (medium 5.3)
- [CVE-2026-14139](https://insights.sbomify.com/CVE-2026-14139/): Other in Chrome (medium 4.2)
- [CVE-2026-14138](https://insights.sbomify.com/CVE-2026-14138/): Other in Chrome (medium 4.2)
- [CVE-2026-14137](https://insights.sbomify.com/CVE-2026-14137/): Other in Chrome (medium 4.2)
- [CVE-2026-14136](https://insights.sbomify.com/CVE-2026-14136/): Other in Chrome (medium 4.3)
- [CVE-2026-14135](https://insights.sbomify.com/CVE-2026-14135/): Other in Chrome (medium 4.3)
- [CVE-2026-14134](https://insights.sbomify.com/CVE-2026-14134/): Other in Chrome (medium 4.3)
- [CVE-2026-14133](https://insights.sbomify.com/CVE-2026-14133/): Race condition in Chrome (medium 4.3)
- [CVE-2026-14132](https://insights.sbomify.com/CVE-2026-14132/): Other in Chrome (medium 4.3)
- [CVE-2026-14131](https://insights.sbomify.com/CVE-2026-14131/): Other in Chrome (medium 4.3)
- [CVE-2026-14130](https://insights.sbomify.com/CVE-2026-14130/): Other in Chrome (medium 4.3)
- [CVE-2026-1413](https://insights.sbomify.com/CVE-2026-1413/): Command injection in Operation and Maintenance Security Management System (medium 5.3)
- [CVE-2026-14129](https://insights.sbomify.com/CVE-2026-14129/): Other in Chrome (medium 4.2)
- [CVE-2026-14128](https://insights.sbomify.com/CVE-2026-14128/): Other in Chrome (medium 4.3)
- [CVE-2026-14127](https://insights.sbomify.com/CVE-2026-14127/): Other in Chrome (medium 4.3)
- [CVE-2026-14126](https://insights.sbomify.com/CVE-2026-14126/): Other in Chrome (medium 4.3)
- [CVE-2026-14125](https://insights.sbomify.com/CVE-2026-14125/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-14124](https://insights.sbomify.com/CVE-2026-14124/): Privilege escalation in Chrome (high 7.8)
- [CVE-2026-14123](https://insights.sbomify.com/CVE-2026-14123/): Other in Chrome (medium 4.3)
- [CVE-2026-14122](https://insights.sbomify.com/CVE-2026-14122/): Other in Chrome (high 8.1)
- [CVE-2026-14121](https://insights.sbomify.com/CVE-2026-14121/): Use after free in Chrome (critical 9.8)
- [CVE-2026-14120](https://insights.sbomify.com/CVE-2026-14120/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-1412](https://insights.sbomify.com/CVE-2026-1412/): Sangfor Operation and Maintenance Security Management System HTTP POST Request get_clip_img command injection (medium 6.9)
- [CVE-2026-14119](https://insights.sbomify.com/CVE-2026-14119/): Memory corruption in Chrome (medium 6.5)
- [CVE-2026-14118](https://insights.sbomify.com/CVE-2026-14118/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-14117](https://insights.sbomify.com/CVE-2026-14117/): Information disclosure in Chrome (medium 5.3)
- [CVE-2026-14116](https://insights.sbomify.com/CVE-2026-14116/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-14115](https://insights.sbomify.com/CVE-2026-14115/): Privilege escalation in Chrome (high 7.5)
- [CVE-2026-14114](https://insights.sbomify.com/CVE-2026-14114/): Other in Chrome (high 7.5)
- [CVE-2026-14113](https://insights.sbomify.com/CVE-2026-14113/): Use after free in Chrome (critical 9.6)
- [CVE-2026-14112](https://insights.sbomify.com/CVE-2026-14112/): Information disclosure in Chrome (medium 5.3)
- [CVE-2026-14111](https://insights.sbomify.com/CVE-2026-14111/): Use after free in Chrome (high 8.1)
- [CVE-2026-14110](https://insights.sbomify.com/CVE-2026-14110/): Other in Chrome (medium 4.3)
- [CVE-2026-1411](https://insights.sbomify.com/CVE-2026-1411/): Beetel 777VR1 UART access control (medium 5.4)
- [CVE-2026-14109](https://insights.sbomify.com/CVE-2026-14109/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-14108](https://insights.sbomify.com/CVE-2026-14108/): Use after free in Chrome (high 8.8)
- [CVE-2026-14107](https://insights.sbomify.com/CVE-2026-14107/): Use after free in Chrome (high 8.8)
- [CVE-2026-14106](https://insights.sbomify.com/CVE-2026-14106/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-14105](https://insights.sbomify.com/CVE-2026-14105/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-14104](https://insights.sbomify.com/CVE-2026-14104/): Code injection in Chrome (high 8.8)
- [CVE-2026-14103](https://insights.sbomify.com/CVE-2026-14103/): Use after free in Chrome (medium 6.5)
- [CVE-2026-14102](https://insights.sbomify.com/CVE-2026-14102/): Use after free in Chrome (high 8.8)
- [CVE-2026-14101](https://insights.sbomify.com/CVE-2026-14101/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-14100](https://insights.sbomify.com/CVE-2026-14100/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-1410](https://insights.sbomify.com/CVE-2026-1410/): Beetel 777VR1 UART missing authentication (medium 5.4)
- [CVE-2026-14099](https://insights.sbomify.com/CVE-2026-14099/): Use after free in Chrome (high 8.8)
- [CVE-2026-14098](https://insights.sbomify.com/CVE-2026-14098/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-14097](https://insights.sbomify.com/CVE-2026-14097/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-14096](https://insights.sbomify.com/CVE-2026-14096/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-14095](https://insights.sbomify.com/CVE-2026-14095/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-14094](https://insights.sbomify.com/CVE-2026-14094/): Use after free in Chrome (high 7.8)
- [CVE-2026-14093](https://insights.sbomify.com/CVE-2026-14093/): Use after free in Chrome (critical 9.6)
- [CVE-2026-14092](https://insights.sbomify.com/CVE-2026-14092/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-14091](https://insights.sbomify.com/CVE-2026-14091/): Use after free in Chrome (high 8.8)
- [CVE-2026-14090](https://insights.sbomify.com/CVE-2026-14090/): Memory corruption in Chrome (critical 9.8)
- [CVE-2026-1409](https://insights.sbomify.com/CVE-2026-1409/): Beetel 777VR1 UART excessive authentication (low 1.0)
- [CVE-2026-14089](https://insights.sbomify.com/CVE-2026-14089/): Other in Chrome (medium 4.3)
- [CVE-2026-14088](https://insights.sbomify.com/CVE-2026-14088/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-14087](https://insights.sbomify.com/CVE-2026-14087/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-14086](https://insights.sbomify.com/CVE-2026-14086/): Security feature bypass in Chrome (high 8.8)
- [CVE-2026-14085](https://insights.sbomify.com/CVE-2026-14085/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-14084](https://insights.sbomify.com/CVE-2026-14084/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-14083](https://insights.sbomify.com/CVE-2026-14083/): Cross-site scripting in Chrome (medium 6.1)
- [CVE-2026-14082](https://insights.sbomify.com/CVE-2026-14082/): Race condition in Chrome (medium 6.5)
- [CVE-2026-14081](https://insights.sbomify.com/CVE-2026-14081/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-14080](https://insights.sbomify.com/CVE-2026-14080/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-1408](https://insights.sbomify.com/CVE-2026-1408/): Beetel 777VR1 UART weak password (low 1.0)
- [CVE-2026-14079](https://insights.sbomify.com/CVE-2026-14079/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-14078](https://insights.sbomify.com/CVE-2026-14078/): Privilege escalation in Chrome (high 8.8)
- [CVE-2026-14077](https://insights.sbomify.com/CVE-2026-14077/): Other in Chrome (medium 4.3)
- [CVE-2026-14076](https://insights.sbomify.com/CVE-2026-14076/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-14075](https://insights.sbomify.com/CVE-2026-14075/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-14074](https://insights.sbomify.com/CVE-2026-14074/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-14073](https://insights.sbomify.com/CVE-2026-14073/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-14072](https://insights.sbomify.com/CVE-2026-14072/): Other in Chrome (medium 4.3)
- [CVE-2026-14071](https://insights.sbomify.com/CVE-2026-14071/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-14070](https://insights.sbomify.com/CVE-2026-14070/): Integer overflow in Chrome (medium 6.5)
- [CVE-2026-1407](https://insights.sbomify.com/CVE-2026-1407/): Beetel 777VR1 UART information disclosure (low 1.0)
- [CVE-2026-14069](https://insights.sbomify.com/CVE-2026-14069/): Integer overflow in Chrome (medium 6.5)
- [CVE-2026-14068](https://insights.sbomify.com/CVE-2026-14068/): Cross-site scripting in Chrome (medium 6.1)
- [CVE-2026-14067](https://insights.sbomify.com/CVE-2026-14067/): Use after free in Chrome (high 8.8)
- [CVE-2026-14066](https://insights.sbomify.com/CVE-2026-14066/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-14065](https://insights.sbomify.com/CVE-2026-14065/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-14064](https://insights.sbomify.com/CVE-2026-14064/): Use after free in Chrome (high 7.5)
- [CVE-2026-14063](https://insights.sbomify.com/CVE-2026-14063/): Memory corruption in Chrome (medium 5.7)
- [CVE-2026-14062](https://insights.sbomify.com/CVE-2026-14062/): Information disclosure in Chrome (medium 5.9)
- [CVE-2026-14061](https://insights.sbomify.com/CVE-2026-14061/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-14060](https://insights.sbomify.com/CVE-2026-14060/): Privilege escalation in Chrome (high 7.8)
- [CVE-2026-1406](https://insights.sbomify.com/CVE-2026-1406/): lcg0124 BootDo Host Header AccessControlFilter.java redirectToLogin (medium 5.1)
- [CVE-2026-14059](https://insights.sbomify.com/CVE-2026-14059/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-14058](https://insights.sbomify.com/CVE-2026-14058/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-14057](https://insights.sbomify.com/CVE-2026-14057/): Security feature bypass in Chrome (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/870/