CVE-2026-14154 is a low severity vulnerability in Google Chrome's DevTools affecting versions before 150.0.7871.47. The flaw allows an attacker who persuades a user to install a malicious Chrome extension to conduct UI spoofing attacks. This means the attacker could manipulate the user interface to deceive users, potentially leading to further social engineering or phishing attacks. The vulnerability is addressed in Chrome version 150.0.7871.47. No CVSS score is provided. The vendor advisory is available but does not explicitly state remediation details beyond the version fixed.

The impact is limited to UI spoofing via malicious extensions installed by user consent. This could mislead users into believing they are interacting with legitimate UI elements, potentially facilitating phishing or social engineering attacks. There is no indication of code execution or privilege escalation. No known exploits are reported in the wild.

Users should update Google Chrome to version 150.0.7871.47 or later to remediate this vulnerability. Since this is a client-side issue involving user-installed extensions, avoiding installation of untrusted extensions also mitigates risk. The vendor advisory confirms the fix is included in the stated version. No additional vendor-provided mitigations are noted.