CVE-2026-14018 is a use-after-free vulnerability in the Updater component of Google Chrome on Windows. This vulnerability allows a local attacker to perform OS-level privilege escalation by exploiting a malicious file. The vulnerability affects Chrome versions prior to 150.0.7871.47. The CVSS 3.1 base score is 7.8, indicating high severity, with attack vector local, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. The vendor has published a stable channel update addressing this issue in version 150.0.7871.47.

Successful exploitation of this vulnerability allows a local attacker to escalate privileges on the Windows operating system, potentially gaining higher-level access than intended. This can lead to full system compromise, including unauthorized access to sensitive information and system control.

Users should update Google Chrome on Windows to version 150.0.7871.47 or later, where this vulnerability is fixed. The vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html provides official update details. No other mitigation is indicated or necessary once the update is applied.