CVE-2026-14145 is a UXSS vulnerability in Google Chrome caused by improper CSS implementation that enables remote attackers to inject arbitrary scripts or HTML through crafted HTML pages. This affects versions prior to 150.0.7871.47. The vulnerability is categorized under CWE-79 (Improper Neutralization of Input During Web Page Generation). The CVSS 3.1 base score is 6.1, indicating a medium severity with network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and low impact on confidentiality and integrity. The vendor advisory URL is provided but does not explicitly confirm patch availability or remediation level.

Successful exploitation allows remote attackers to perform UXSS attacks, potentially leading to the injection and execution of arbitrary scripts or HTML content in the context of the victim's browser. This can compromise confidentiality and integrity of user data within the browser session. There is no reported impact on availability. No known exploits in the wild have been reported.

The vendor advisory link is provided but does not explicitly confirm patch availability or remediation status. Since the affected version is prior to 150.0.7871.47, upgrading to version 150.0.7871.47 or later is recommended as it is implied to address the issue. Patch status is not explicitly confirmed—check the vendor advisory for the latest remediation guidance.