CVE-2026-14116 is a vulnerability in Google Chrome's DevTools component affecting versions before 150.0.7871.47. The root cause is insufficient validation of untrusted input, which can be exploited by a remote attacker who convinces a user to perform particular UI gestures. Successful exploitation may result in leakage of cross-origin data via a crafted HTML page. The vulnerability has been publicly disclosed but lacks a CVSS score and explicit remediation level in the provided data. The vendor advisory URL is available for further details.

The vulnerability allows an attacker to leak cross-origin data by exploiting insufficient input validation in DevTools when a user interacts with a maliciously crafted page. This could lead to unauthorized disclosure of information across origins. The severity is rated low by Chromium security, indicating limited impact or difficulty in exploitation.

A fix is available in Google Chrome version 150.0.7871.47. Users and administrators should update to this version or later to remediate the vulnerability. Since this is a client-side browser issue, patching the affected Chrome installations is the recommended mitigation. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for confirmation and update instructions.