CVE-2026-14058 is a vulnerability in Google Chrome's Parser that results in insufficient enforcement of content security policies. This allows remote attackers to bypass these policies via crafted HTML content. The vulnerability affects versions before 150.0.7871.47. The CVSS 3.1 base score is 4.3, indicating a medium severity with low impact on confidentiality and no impact on availability or privileges. The vendor has published an advisory but has not explicitly stated a remediation level or patch availability in the provided data.

The vulnerability allows remote attackers to bypass content security policies, potentially enabling the execution of unauthorized scripts or content in the browser context. However, the impact is limited to integrity with no direct confidentiality or availability impact. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Since no explicit patch or remediation level is provided, users and administrators should monitor official Google Chrome release notes and apply updates promptly once available.