CVE-2026-14406 is an out of bounds read vulnerability in the V8 JavaScript engine used by Google Chrome. It affects Chrome versions before 150.0.7871.46. Exploitation requires user interaction in the form of installing a crafted malicious Chrome extension, which can then read potentially sensitive information from process memory. The vulnerability was publicly disclosed and is tracked by Google with a medium severity rating. No official patch or remediation level is explicitly stated in the provided data, but the affected version is identified as exactly 150.0.7871.46, implying that versions prior to this are vulnerable.

An attacker who successfully convinces a user to install a malicious Chrome extension can exploit this vulnerability to read sensitive information from the browser's process memory. This could lead to information disclosure but requires user interaction and installation of a malicious extension. There is no indication of remote code execution or broader system compromise from the provided data.

The vendor advisory link is provided but does not explicitly state a remediation level or patch status in the input data. The affected version is identified as =150.0.7871.46, suggesting that updating to this version or later would mitigate the vulnerability. Users and administrators should update Google Chrome to version 150.0.7871.46 or later to address this issue. Patch status is not yet confirmed in the provided data; check the vendor advisory for current remediation guidance.