CVE-2026-14156 is a vulnerability in Google Chrome's StorageAccessAPI where insufficient policy enforcement allows a remote attacker with control over the renderer process to bypass the same origin policy. This issue affects Chrome versions before 150.0.7871.47 and was publicly disclosed with a low severity rating. The vulnerability enables bypassing security restrictions designed to isolate web origins, but exploitation requires prior compromise of the renderer process.

The vulnerability allows bypassing the same origin policy, potentially enabling unauthorized access to data across origins within the browser context. However, exploitation requires the attacker to have already compromised the renderer process, limiting the scope of impact. The Chromium project rates this issue as low severity, indicating limited risk under typical conditions.

A fixed version 150.0.7871.47 is available that addresses this vulnerability. Users and administrators should update Google Chrome to version 150.0.7871.47 or later to remediate this issue. No additional mitigation steps are indicated by the vendor advisory.