The vulnerability CVE-2026-14381 concerns an incorrect security user interface in the WebAppInstalls feature of Google Chrome versions before 150.0.7871.46. This UI flaw enables a remote attacker to conduct UI spoofing attacks by delivering a specially crafted HTML page. The vulnerability was disclosed with medium severity by the Chromium security team. Although a vendor advisory link is provided, it does not explicitly confirm the availability of a patch or remediation level. The affected version is exactly 150.0.7871.46, implying that versions prior to this are vulnerable.

An attacker exploiting this vulnerability can deceive users by spoofing the browser's security UI, potentially leading to user confusion or trust in malicious content. The impact is limited to UI spoofing and does not indicate direct code execution or data compromise. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until official confirmation, users should update to the latest Chrome version once available to ensure protection against this UI spoofing vulnerability.