CVE-2026-14034 is a medium-severity vulnerability in Google Chrome's WebXR feature on Android devices. The flaw allows a remote attacker to bypass navigation restrictions by leveraging a crafted HTML page. The vulnerability affects Chrome versions before 150.0.7871.47. The CVSS vector indicates that the attack requires no privileges but does require user interaction, and it impacts the integrity of the application without affecting confidentiality or availability. No known exploits are reported in the wild. The vendor advisory linked does not explicitly state the patch status or remediation level.

The vulnerability allows a remote attacker to bypass navigation restrictions, potentially leading to unauthorized navigation actions within the browser context. The impact is limited to integrity loss without confidentiality or availability impact. No known active exploitation has been reported.

A fix is available in Google Chrome version 150.0.7871.47. Users and administrators should update affected Chrome installations on Android to this version or later to remediate the vulnerability. Since this is not a cloud service, remediation depends on applying the update. Patch status is not explicitly confirmed in the vendor advisory, so users should verify update availability via official Chrome release channels.