CVE-2026-14119: exploitation status and patch state

CVE-2026-14119 · CVSS 6.5 MEDIUM · EPSS <1% · patch available

Type Confusion in Bluetooth in Google Chrome on Windows prior to 150.0.7871.47 allowed an attacker on the local network segment to obtain potentially sensitive information from process memory via a malicious peripheral. (Chromium security severity: Low)

Is CVE-2026-14119 exploited?

• Not in the CISA KEV catalog.
• EPSS puts exploitation in the next 30 days at <1%.
• Public exploit code: none found in monitored sources.

Which products and versions are affected?

No affected package list recorded here yet.

Is there a patch?

• Release Notes

What PlainSec published about CVE-2026-14119

• Chrome Fleet Exposure Ends Only After Every Build Updates (2026-07-01)

Primary sources

• NVD record

What this record does not say

• No affected package data.

KEV and EPSS are re-checked daily. Record last updated 2026-08-14.