CVE-2026-14060 describes a local privilege escalation vulnerability in Google Chrome's Chromoting feature on Windows platforms before version 150.0.7871.47. The vulnerability arises from insufficient validation of untrusted input, which could be leveraged by a local attacker via a malicious file to gain elevated privileges. The CVSS v3.1 base score is 7.8, indicating a high severity level with high impact on confidentiality, integrity, and availability. Although a vendor advisory link is provided, it does not explicitly confirm the availability of a patch or remediation level.

Successful exploitation of this vulnerability could allow a local attacker to escalate privileges on the affected Windows system, potentially leading to full system compromise. The CVSS vector indicates that the attack requires local access with low attack complexity, no privileges initially, and user interaction. The impact on confidentiality, integrity, and availability is high.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until official confirmation of a fix, users should avoid executing untrusted files and restrict local access to trusted users only.