CVE-2026-14074 is a side-channel information leakage vulnerability affecting Google Chrome on iOS before version 150.0.7871.47. The vulnerability resides in the WebAuthentication feature and enables a remote attacker to leak data across origins via a specially crafted HTML page. The Chromium security team has assigned a low severity rating to this issue. There is no CVSS score provided, and no explicit remediation level or patch link is included in the source data. The vendor advisory URL points to a Chrome stable channel update announcement, which likely includes the fix in version 150.0.7871.47.

An attacker can exploit this vulnerability to leak cross-origin information through a side-channel attack on the WebAuthentication API in Chrome on iOS. The impact is limited to information disclosure and does not indicate further compromise such as code execution or privilege escalation. The severity is low, indicating limited risk or difficulty in exploitation.

Users should update Google Chrome on iOS to version 150.0.7871.47 or later, where this vulnerability is addressed. The vendor advisory linked corresponds to a stable channel update that includes the fix. No additional mitigation steps are specified or required beyond applying the update.