The vulnerability CVE-2026-14060 involves insufficient validation of untrusted input within the Chromoting feature of Google Chrome on Windows platforms. This weakness permits a local attacker to perform privilege escalation by exploiting a specially crafted malicious file. The vulnerability affects Chrome versions before 150.0.7871.47. The Chromium security team has assigned a low severity rating to this issue. There is no explicit remediation level or patch status provided in the data, but a vendor advisory URL is available for further details.

A local attacker can exploit this vulnerability to escalate privileges on a Windows system running an affected version of Google Chrome. The impact is limited to privilege escalation and is rated as low severity by the vendor. There is no indication of remote exploitation or broader impact beyond local privilege escalation.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Since the affected version is prior to 150.0.7871.47, updating to version 150.0.7871.47 or later is recommended once confirmed by the vendor advisory. No additional mitigation details are provided.