CVE-2026-14070 is an integer overflow vulnerability in the WebNN module of Google Chrome before version 150.0.7871.47. This flaw could be exploited remotely via a crafted HTML page to read potentially sensitive information from the browser's process memory. The vulnerability has been assigned a low severity rating by Chromium security. No CVSS score or detailed remediation status is provided in the input data. The vendor advisory URL points to a Chrome stable channel update announcement, suggesting that remediation may be included in or after version 150.0.7871.47.

A remote attacker can exploit this integer overflow vulnerability to obtain potentially sensitive information from the memory of the Chrome process. The impact is limited to information disclosure and is rated as low severity by the vendor. There is no indication of code execution or privilege escalation from the provided data.

The input data does not explicitly confirm a patch or remediation status. However, the affected version is listed as 150.0.7871.47, indicating that upgrading to this version or later likely addresses the vulnerability. Users should update Google Chrome to version 150.0.7871.47 or later. Consult the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for official remediation details and update instructions. Patch status is not yet confirmed explicitly; verify current remediation guidance from the vendor advisory.