CVE-2026-14122 is a vulnerability in Google Chrome on Windows platforms before version 150.0.7871.47. It arises from insufficient validation of untrusted input within the WebAppInstalls feature, enabling remote attackers to conduct arbitrary read and write operations through a specially crafted HTML page. The Chromium security team rates this vulnerability as low severity. The vendor advisory references a stable channel update but does not explicitly confirm patch status or remediation details in the provided information.

The vulnerability allows remote attackers to perform arbitrary read and write actions via crafted HTML content, potentially leading to unauthorized data access or modification within the affected Chrome browser instance. However, the severity is rated low, indicating limited impact or exploitability. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Since the vendor advisory does not explicitly state a fix or remediation level, users should monitor for official updates and apply them promptly once available.