CVE-2026-14408 is an uninitialized use vulnerability in the Dawn component of Google Chrome. It affects versions prior to 150.0.7871.46 and enables a remote attacker to obtain potentially sensitive information from process memory by delivering a crafted HTML page. The vulnerability was publicly disclosed with medium severity by Chromium security. The fixed version is 150.0.7871.46, indicating that versions before this are vulnerable. No CVSS score is assigned. The vendor advisory URL points to a stable channel update announcement, suggesting the fix is included in that release.

A remote attacker can exploit this vulnerability to read potentially sensitive information from the memory of the Chrome process. This could lead to information disclosure but does not indicate code execution or privilege escalation. The impact is limited to information leakage from process memory.

Users should update Google Chrome to version 150.0.7871.46 or later to remediate this vulnerability. The vendor advisory indicates that this version includes the fix. No additional mitigation steps are specified or required beyond applying the update.