CVE-2026-14094 is a use-after-free vulnerability in the Google Chrome Installer on Windows platforms. The flaw allows a local attacker to perform OS-level privilege escalation by exploiting the improper handling of memory in the installer process. The vulnerability affects Chrome versions before 150.0.7871.47. The CVSS 3.1 base score is 7.8, indicating high severity, with attack vector local, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability. Google has published an advisory and released Chrome version 150.0.7871.47 as a fix.

Successful exploitation of this vulnerability enables a local attacker to escalate privileges on the Windows operating system, potentially gaining elevated control over the affected system. This can lead to full compromise of the user environment where Chrome is installed. The vulnerability does not appear to have known exploits in the wild at this time.

Google has released Chrome version 150.0.7871.47 which addresses this vulnerability. Users and administrators should update to this version or later to remediate the issue. No alternative mitigations or workarounds are indicated in the vendor advisory.