The vulnerability CVE-2026-14143 affects Google Chrome on iOS versions before 150.0.7871.47. It is caused by incorrect security UI handling in the Passwords component, enabling a remote attacker to conduct UI spoofing attacks by crafting malicious HTML pages. This could mislead users by displaying deceptive UI elements. The issue is categorized under CWE-451 (Incorrect Expression of User Interface in Security Controls). There is no explicit vendor advisory stating a patch or remediation level, and no known exploits in the wild have been reported.

The impact is limited to UI spoofing, which can mislead users into believing they are interacting with legitimate security prompts or password UI elements. This could potentially lead to user deception but does not directly compromise confidentiality or availability of data. The CVSS vector indicates no confidentiality or availability impact, only a low integrity impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The provided vendor advisory link should be monitored for updates on official fixes. Until a fix is confirmed, users should exercise caution when interacting with password-related UI elements in Chrome on iOS and avoid clicking suspicious links or pages.