CVE-2026-14023 is a vulnerability in Google Chrome's SanitizerAPI where insufficient validation of untrusted input can be exploited by a remote attacker to bypass the same origin policy. This vulnerability affects Chrome versions prior to 150.0.7871.47. The same origin policy bypass can lead to unauthorized interactions between web origins, potentially allowing an attacker to perform actions or access data across origins that should be isolated. The vulnerability is categorized under CWE-20 (Improper Input Validation) and has a CVSS v3.1 base score of 6.5, indicating a medium severity level. There is no indication of known exploits in the wild at this time.

The vulnerability allows a remote attacker to bypass the same origin policy in affected versions of Google Chrome. This can lead to unauthorized access or manipulation of web content across different origins, potentially compromising user data or session integrity. The CVSS vector indicates the attack requires no privileges and user interaction, with a network attack vector and low attack complexity. The impact is limited to integrity compromise without confidentiality or availability impact.

A fixed version of Google Chrome is available at 150.0.7871.47, which addresses this vulnerability. Users and administrators should update to this version or later to mitigate the risk. The vendor advisory linked confirms the update release. No additional temporary mitigations or workarounds are specified.