CVE-2026-14046 describes a security flaw in the CustomTabs feature of Google Chrome on Android versions before 150.0.7871.47. This flaw permits a remote attacker to bypass the same origin policy by leveraging a crafted HTML page. The same origin policy is a critical security mechanism that restricts how documents or scripts loaded from one origin can interact with resources from another origin. The vulnerability is acknowledged by Google and referenced in their Chrome stable channel update advisory. No detailed remediation level or patch status is explicitly stated in the provided data, but the affected versions are those prior to 150.0.7871.47.

The vulnerability allows bypassing the same origin policy, which could enable unauthorized access to data or interactions across origins that should be isolated. However, the Chromium security team has rated this issue as low severity, indicating limited impact or exploitability. There are no known exploits in the wild at this time.

The vendor advisory linked indicates a stable channel update for Chrome that includes version 150.0.7871.47, which addresses this issue. Users should update Google Chrome on Android to version 150.0.7871.47 or later to remediate this vulnerability. Patch status is not explicitly confirmed in the advisory content provided, so users should verify the update availability and installation status via official Google Chrome update channels.