CVE-2026-14071 is a side-channel information leakage vulnerability affecting the WebAudio feature in Google Chrome before version 150.0.7871.47. An attacker can exploit this issue remotely by delivering a specially crafted HTML page that causes cross-origin data leakage. The vulnerability does not have a CVSS score but is rated low severity by the vendor. The issue was publicly disclosed with a vendor advisory available at the Chrome Releases blog. No known exploits in the wild have been reported. The vulnerability is fixed in Chrome version 150.0.7871.47.

The vulnerability enables a remote attacker to leak cross-origin data via a side-channel attack on the WebAudio API. This could potentially expose sensitive information from other origins within the browser context. However, the impact is considered low severity by the vendor, indicating limited risk or difficulty in exploitation.

Users should update Google Chrome to version 150.0.7871.47 or later to remediate this vulnerability. The vendor advisory indicates that the issue is fixed in this version. No additional mitigation steps are specified or required beyond applying the update.