CVE-2026-14133 is a race condition vulnerability in Google Chrome's History Embeddings feature affecting versions before 150.0.7871.47. This flaw enables a remote attacker to craft an HTML page that can spoof the user interface, potentially misleading users. The vulnerability has been assigned a medium severity with a CVSS 3.1 base score of 4.3, indicating limited impact primarily on integrity with no confidentiality or availability impact. There is no explicit vendor remediation level stated, and no patch links are provided in the data. The vendor advisory URL points to a Chrome stable channel update announcement, but patch status is not explicitly confirmed in the provided data.

The vulnerability allows remote attackers to perform UI spoofing, which can deceive users by presenting misleading interface elements. This impacts the integrity of the user interface but does not affect confidentiality or availability. There are no known exploits in the wild, reducing immediate risk.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution when interacting with untrusted web content that could exploit UI spoofing.