CVE-2026-14015 is a vulnerability in Google Chrome's WebRTC component on Windows platforms before version 150.0.7871.47. It involves a race condition that can be exploited by a remote attacker through a specially crafted HTML page to leak data across origins. This cross-origin data leak could potentially expose sensitive information from other web origins. The vulnerability is recognized as medium severity by Chromium security. No detailed CVSS score or explicit remediation level is provided in the available data. The vendor advisory link is provided but does not explicitly state patch or remediation status in the input.

The vulnerability allows a remote attacker to leak cross-origin data, which may lead to unauthorized disclosure of sensitive information from other web origins within the browser context. This compromises the confidentiality of data handled by the affected Chrome versions on Windows. There is no indication of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Users should update to Chrome version 150.0.7871.47 or later once available to mitigate this vulnerability.