CVE-2026-14148 is a type confusion vulnerability in Google Chrome's CSS processing that affects versions prior to 150.0.7871.47. This flaw enables a remote attacker to obtain potentially sensitive information from process memory through a specially crafted HTML page. The vulnerability is rated as low severity by Chromium security. No CVSS score is provided. The vendor advisory URL is available but does not explicitly state the patch or remediation status in the provided data.

An attacker can remotely exploit this vulnerability by convincing a user to load a malicious HTML page, potentially leading to disclosure of sensitive information from the browser's process memory. The impact is limited to information disclosure and is considered low severity by the vendor.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Since the affected version is identified as exactly 150.0.7871.47, updating to this version or later is likely recommended. No specific temporary mitigations are provided.