CVE-2026-14113 is a use-after-free vulnerability (CWE-416) in the Updater component of Google Chrome on Windows platforms before version 150.0.7871.47. Exploitation requires prior compromise of the renderer process and could enable an attacker to perform a sandbox escape via a crafted HTML page. The vulnerability has a CVSS v3.1 base score of 9.6, indicating critical severity with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts to confidentiality, integrity, and availability. No known exploits in the wild have been reported. The vendor advisory URL is provided but does not explicitly state patch availability or remediation level.

Successful exploitation could allow an attacker who has already compromised the renderer process to escape the Chrome sandbox, potentially gaining elevated privileges and full control over the affected system. This could lead to complete compromise of confidentiality, integrity, and availability of the system running the vulnerable Chrome version.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Users should update to version 150.0.7871.47 or later once available. Until then, limiting exposure to untrusted content and maintaining standard security best practices is advised.