CVE-2026-14010 is an uninitialized use vulnerability in the codecs component of Google Chrome on Windows platforms before version 150.0.7871.47. This flaw permits a remote attacker to potentially extract sensitive information from process memory by exploiting the way uninitialized data is handled when processing crafted HTML content. The vulnerability was publicly disclosed with a medium severity rating by Chromium security. The vendor advisory link is provided but does not explicitly state patch or remediation details in the input data.

The vulnerability could lead to unauthorized disclosure of sensitive information from the memory of the affected Chrome process. This exposure is limited to information that resides in uninitialized memory areas accessed during codec operations triggered by malicious HTML content. There is no indication of code execution or broader system compromise from the provided data.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Users should update to version 150.0.7871.47 or later once confirmed patched. Until then, cautious browsing and avoiding untrusted HTML content may reduce risk.