CVE-2026-14124 describes a local privilege escalation vulnerability in Google Chrome's CredentialProvider on Windows platforms before version 150.0.7871.47. The vulnerability arises from an inappropriate implementation that can be exploited by a local attacker using a malicious file to gain elevated OS privileges. The Chromium project rates this security issue as low severity. Although a vendor advisory link is provided, it does not explicitly confirm the availability of a patch or remediation steps.

The vulnerability permits a local attacker to escalate privileges on the affected Windows system via a malicious file, potentially allowing actions with higher OS-level permissions than intended. The impact is considered low severity by the vendor, indicating limited risk or difficulty in exploitation. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until confirmation of a fix, restrict local access to trusted users only and monitor for suspicious local activity related to Chrome's CredentialProvider component.