CVE-2026-14018 is a use-after-free vulnerability in the Updater component of Google Chrome on Windows platforms. The flaw allows a local attacker to perform OS-level privilege escalation by exploiting the improper handling of memory after it has been freed, triggered via a malicious file. The vulnerability affects Chrome versions prior to 150.0.7871.47. Google has released version 150.0.7871.47 to fix this issue. No CVSS score is provided, but the Chromium security team rates it as medium severity.

Successful exploitation of this vulnerability enables a local attacker to escalate privileges on the affected Windows system, potentially gaining higher-level access than originally permitted. This could lead to unauthorized actions at the OS level. There are no known exploits in the wild at the time of publication.

Users should update Google Chrome on Windows to version 150.0.7871.47 or later to remediate this vulnerability. Since this is a client-side application, patching to the fixed version is the recommended and effective mitigation. No additional vendor advisories indicate alternative mitigations or that no action is required.