The vulnerability CVE-2026-14137 affects Google Chrome on iOS versions before 150.0.7871.47. It stems from insufficient validation of untrusted input, enabling a remote attacker to conduct UI spoofing attacks if the user is tricked into performing certain UI gestures on a maliciously crafted HTML page. This could mislead users by displaying deceptive user interface elements. The vulnerability is classified as low severity by the Chromium security team. There is no explicit remediation level or patch status provided in the available data. The vendor advisory URL is provided but does not specify patch details in the input.

An attacker can remotely induce a user to perform specific UI gestures on a crafted HTML page, leading to UI spoofing. This may cause the user to be misled by falsified interface elements, potentially impacting user trust and interaction. The severity is low, indicating limited impact and no direct compromise of system integrity or data confidentiality.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution when interacting with untrusted web content on Chrome for iOS and avoid performing unexpected UI gestures prompted by unknown sites.