CVE-2026-14117 is a vulnerability in Google Chrome's DevTools on Windows platforms before version 150.0.7871.47. It arises from insufficient validation of untrusted input, which can be exploited by a remote attacker who convinces a user to perform certain UI gestures on a maliciously crafted HTML page. Successful exploitation may lead to disclosure of potentially sensitive information from the browser's process memory. The vulnerability is classified as low severity by the Chromium security team. No CVSS score is provided. There is no explicit vendor advisory stating the availability of a patch or remediation level, but the affected versions are prior to 150.0.7871.47.

An attacker can potentially access sensitive information from process memory by tricking a user into performing specific UI gestures on a crafted HTML page. The impact is limited to information disclosure and requires user interaction. The severity is low, indicating limited risk and impact.

The vulnerability affects Google Chrome versions prior to 150.0.7871.47 on Windows. Users should update to version 150.0.7871.47 or later to address this issue. Patch status is not explicitly confirmed in the vendor advisory, but the affected version indicates that the issue is fixed in 150.0.7871.47. No additional mitigation steps are provided by the vendor.