CVE-2026-14048 is a use-after-free vulnerability affecting the Chromecast functionality in Google Chrome versions before 150.0.7871.47. An attacker positioned on the same local network segment can exploit this flaw by using a malicious peripheral device to obtain potentially sensitive information from the browser's process memory. The vulnerability is rated medium severity with a CVSS 3.1 base score of 6.5, reflecting a network attack vector with low complexity and no privileges or user interaction required. The vendor advisory linked does not explicitly state if a patch is available or if remediation has been applied.

Successful exploitation could lead to unauthorized disclosure of sensitive information from Chrome's process memory. There is no indication of integrity or availability impact. The attack requires local network access and a malicious peripheral, limiting the attack surface. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until then, limit exposure to untrusted peripherals and local network attackers.