CVE-2026-14071 is a side-channel information leakage vulnerability in the WebAudio API of Google Chrome. It affects versions prior to 150.0.7871.47 and enables a remote attacker to leak cross-origin data by leveraging crafted HTML content. The vulnerability is classified under CWE-1300 (Improper Handling of Side Channel Information) and CWE-203 (Information Exposure Through Discrepancy). The CVSS 3.1 base score is 6.5, indicating medium severity, with an attack vector of network, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality. The vendor has released Chrome 150.0.7871.47 as the fixed version. No official remediation level or patch links are explicitly stated beyond the vendor advisory blog post.

Successful exploitation allows a remote attacker to leak sensitive cross-origin information via a side-channel in the WebAudio API, potentially compromising user data confidentiality. There is no impact on integrity or availability. No known exploits are currently reported in the wild.

Users and administrators should update Google Chrome to version 150.0.7871.47 or later to remediate this vulnerability. The vendor advisory confirms the fix is included in this version. No additional mitigations are specified or required.