CVE-2026-14088 describes an uninitialized use vulnerability in the Canvas implementation of Google Chrome on Android platforms before version 150.0.7871.47. This vulnerability allows remote attackers to access potentially sensitive information from process memory through a specially crafted HTML page. The issue was publicly disclosed with a low severity rating by Chromium security. The vendor advisory link is provided but does not explicitly state patch availability or remediation details in the input data.

The vulnerability could lead to information disclosure by allowing an attacker to read uninitialized memory contents from the Chrome process on Android devices. This may expose sensitive data present in memory at the time of exploitation. The severity is considered low, indicating limited impact or difficulty in exploitation.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Users should update to version 150.0.7871.47 or later once confirmed by the vendor. Until then, no specific mitigation steps are provided.