This vulnerability (CVE-2026-14065) affects Google Chrome versions before 150.0.7871.47. It arises from insufficient validation of untrusted input within the PageInfo feature, enabling an attacker with renderer process access to bypass navigation restrictions via a crafted HTML page. The CVSS 3.1 base score is 6.5, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. The vendor advisory link is provided but does not explicitly state patch availability or remediation level.

An attacker who has already compromised the renderer process can exploit this vulnerability to bypass navigation restrictions, potentially leading to unauthorized actions or integrity violations within the browser context. There is no impact on confidentiality or availability reported. No known exploits in the wild have been documented.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until official fixes are confirmed, users should exercise caution with untrusted content and ensure their Chrome installations are updated promptly once a patch is released.