CVE-2026-14082 is a race condition vulnerability (CWE-362) in Google Chrome's storage subsystem affecting versions before 150.0.7871.47. This flaw enables a remote attacker to leak cross-origin data by exploiting timing issues via a crafted HTML page. The vulnerability has a CVSS 3.1 base score of 6.5, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, high confidentiality impact, and no integrity or availability impact. The vendor advisory references a stable channel update but does not explicitly state if this update fully addresses the issue or if further action is required.

Successful exploitation can lead to unauthorized disclosure of cross-origin data, compromising confidentiality. There is no impact on integrity or availability. The attack requires user interaction and can be performed remotely over the network. No known active exploits have been reported.

The vendor advisory references a stable channel update for Chrome but does not explicitly confirm that this update patches the vulnerability. Users should update to version 150.0.7871.47 or later once confirmed by the vendor advisory. Patch status is not yet confirmed—check the vendor advisory for current remediation guidance before taking further action.