CVE-2026-14146 describes a low-severity vulnerability in Google Chrome's CSS implementation prior to version 150.0.7871.47. This flaw allows a remote attacker to leak cross-origin data by crafting a malicious HTML page. The vulnerability is limited to versions before 150.0.7871.47. No detailed technical exploitation methods or impact beyond data leakage are provided. The vendor advisory is referenced but does not explicitly state patch availability or remediation instructions.

The vulnerability enables remote attackers to leak cross-origin data, potentially exposing sensitive information accessible via the browser. The severity is rated low by Chromium security, indicating limited impact or difficulty of exploitation. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Users should update to version 150.0.7871.47 or later once confirmed patched. No other specific mitigations are provided.