CVE-2026-14122 describes a security vulnerability in Google Chrome on Windows where insufficient validation of untrusted input in the WebAppInstalls feature allows remote attackers to execute arbitrary read and write operations through a crafted HTML page. This vulnerability is classified under CWE-20 (Improper Input Validation) and affects versions prior to 150.0.7871.47. The CVSS 3.1 base score is 8.1, indicating high severity, with attack vector network, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality and integrity. The vendor advisory is linked but does not explicitly state whether a fix has been released or if the issue is mitigated.

Successful exploitation allows a remote attacker to perform arbitrary read and write operations on the affected system via a crafted HTML page, potentially compromising confidentiality and integrity of data. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until official confirmation of a fix, users should exercise caution when visiting untrusted websites and consider applying any available Chrome updates promptly.